{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:cb228822-c5a1-583e-9c7e-325b5a1fecc9", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jcl", "purl": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1", "version": "5.2.9.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0f1d8812-9001-5e82-95d9-5bb26dd99d70", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4f2897d6-d2de-5787-8dfa-d95b4980aff2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:204c1320-a40a-5efe-90bc-a9abbc53fb24", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3367a9b8-770f-54ce-a04a-c5b69aff5094", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e008bab7-66b1-5ae2-8db4-f4e200ef13ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:af561f31-5083-5793-97ee-b682e27ccb1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:21904044-0947-58be-8e23-7050b81ace23", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9f637c5c-7947-5e21-9b77-7bd39cc65a71", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c5260e4a-a0b5-50f4-b1f3-54e155c558f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ab9745e9-a891-5cf1-a094-a69e86f8bb66", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6c30d07d-e03b-5537-825b-0711e3911dc6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c4e6beb1-50a1-5ccf-a319-73f42039e89d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3d5cb304-6433-5a3f-8f88-78f0d41900b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3dc0ebc6-7ea3-5cb1-acbe-db5846986da3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e8231010-fd43-5b67-8b4a-ed25f96c1034", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c49f0586-d1b1-5b29-81ce-3f31a8b88736", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:57967b13-645a-5387-9ffb-4c7f55351afe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:baa1f839-7f21-5726-a1c3-a176a3d4ab72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7226dde7-312d-5ca9-810c-b5de479bfc97", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl. not_affected \u2014 Spring Framework 5.2.9.RELEASE is not affected by CVE-2024-38820 because it lacks the vulnerable code pattern. CVE-2024-38820 fixes a locale-dependent case conversion bug in DataBinder's disallowedFields validation that was introduced by CVE-2022-22968. Version 5.2.9.RELEASE never received the CVE-2022-22968 fix, so it still uses case-SENSITIVE field matching (no toLowerCase calls) in DataBinde...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c46dff24-a22e-51c1-a4fa-d5c54a733941", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:873f9209-95a4-560c-b685-8738b8c5ead6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b68ddb93-9a73-5f55-9f22-024ee029de68", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1db6dbb2-2fbf-5bbf-9c67-4cabfed6091f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a384d93a-bb0a-52da-b5fd-b6f5244ac89b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ec3c9823-6793-5e5c-8f85-8f7ab123d82c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5c5e7565-2354-5735-a9a9-b88dd0515f97", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:62bb2c65-7c89-5062-9e5a-dd6448f4c25f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a9d94125-727c-557a-8aff-10b42c5cfaa1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1eeefd90-4b4b-503e-a11d-7bf76e8b67ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cd9b16c7-ad56-5d12-9ca0-5546bd217c87", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d9d43593-b0b9-5907-ac03-2fae7f2775aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d244f380-ca88-560f-aaeb-5679230fcba5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1a356e21-daa0-58e5-83ba-b83301910def", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:837094ae-f7fa-5950-a3ec-567f003be786", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5eedea28-3e62-5f29-b3d0-5a6212a624a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1f9f5669-ff82-514d-8554-ce0cf88aae79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6816f3c9-797b-534a-9637-b076ffa06481", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:52e2659e-3f33-5a3c-96fa-d8df8a3fd62a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bb6cfef6-262c-5ab5-8444-32c3371fe9dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:96caa9f6-5ddf-5487-a3b3-d077bd47e2f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:af7a834c-f253-5563-9f19-fac066b86974", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:85aa0d7c-241f-556f-8748-cba3f0b159e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e2607a80-ae65-504f-a8b3-59dbf18eef82", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a8291232-8202-5238-bcfa-b5a191fd8ffa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9906aadc-dbaa-54e6-a43f-f99e0ef29546", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0f91a22a-ff53-5d72-8086-aebd420b9501", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:98c5d872-8a4b-571d-b2c5-4d6fecf7d91a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6fc62546-de3d-5b21-83dd-00339944843c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bf1ed621-4215-5905-a0e5-bc3576d38938", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:65b9656d-b039-5ae1-be4d-419634d5a209", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bd8f43d6-ca93-53e4-a29a-8a55d3a65c35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:35cb09e7-662a-5a62-8bf5-fd1e95db85a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:efe52423-db27-5571-b684-961772fa968d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6ff4076f-6b8a-5943-bc96-17bbe82874e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2206416b-8321-5a74-b270-b1aef235144a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2b774aa9-62c9-5a1f-b18f-640191634564", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ccb32554-8ce0-5442-8207-77db85d2eb9e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cdfd648e-1a6e-5ccc-a907-01bc030c2cd8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.9.RELEASE-tuxcare.1" } ] }