{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:353abd13-05fc-5528-83b2-3898fb89df51", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jdbc", "purl": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1", "version": "5.2.10.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a0ea8d34-a704-5d76-a17e-d2f851974eca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:554cb15d-ae32-55dc-90e4-88a6ba126bee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f12ef989-6d53-5010-a89b-61194bc8ba3f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:040ee18c-bbaf-5051-a32d-a855ca2f34ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8aca252f-0358-5cff-ae5e-bc62d4cfc2ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:60492504-4c16-5827-b10b-8f634ed0ce01", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5184fab2-79ae-5774-a056-23bb0e3c4673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:31e703e3-5494-5b44-a4fd-44ea5be24f19", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:da40016f-1329-58fd-aa86-fb52bc3bdeed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0b2f38ca-0315-531f-a940-1833021a55ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:eff09d5c-9450-5310-9bf1-b9a60e2d64c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:151cdbb6-d468-5b5d-8a85-d516316aa2bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8c53cf87-77ee-5f5c-a05e-b506e5fe16c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:042c24b4-36cf-580a-897d-edd4f2c55818", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:76ea1797-9ac1-5bbd-86d0-fd87232ecb3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:21a1690e-056e-5262-8d13-08a406061387", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e99b58ce-5a08-57d4-bb0f-96d4325e872f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3ac86de1-0a60-5a94-9c46-e17b8bcb402e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ff7793ef-1910-56cf-911e-7d99a22c746b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc. not_affected \u2014 Version 5.2.10.RELEASE does not contain the vulnerable code pattern described in CVE-2024-38820. This CVE specifically affects the fix for CVE-2022-22968, which introduced case-insensitive field matching using String.toLowerCase() without a Locale parameter. The target version uses case-sensitive matching and does not call toLowerCase() in its DataBinder field validation logic. Therefore, the l...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:036a938d-542b-59f0-8b09-36d7032db6cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ace4ce30-17d1-50f0-bdec-868d119950e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ad8d7892-a8f6-5f0e-8058-2d4d5f494399", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6521c3fb-e2f6-5e27-8886-8e3b55245cce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a75be0f3-1bd0-55a8-bff2-da496a38bbd4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2665add4-0ce7-56ef-849d-8556dbdbb193", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:db8e97b6-7f44-5c7d-9144-1c306bb5b478", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d2659dd0-3d93-5ba2-b6c1-f7e508c22244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:680bf8c6-41f5-5840-a0bf-167f1be3421c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bce2cbb4-8b21-565c-bf1c-f7aa3bc61475", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3451f9a8-560e-5a70-bc29-a5f2fe78e6ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d85cbf1b-1b2d-5e4f-8e2c-a22ebb810289", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc. not_affected \u2014 Version 5.2.10.RELEASE is not affected by CVE-2026-41840. The vulnerability targets the PartGenerator/MultipartParser multipart parsing implementation introduced in Spring Framework 5.3.0. Version 5.2.10 (released October 2020, before 5.3.0) uses a completely different Synchronoss-based multipart parsing architecture that does not have the vulnerable BodyToken buffering mechanism. The vulnerabl...", "justification": "code_not_present" } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:abe20103-d657-56ff-8f77-196f251471ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:802a3f17-16e3-5d1d-8845-3b2c30ce2437", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:61cf2a2e-e999-589a-aa6e-efbf5055a127", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bf8a9d3d-9153-591d-a1c0-9ece0ebe83fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:33aaea90-cb79-5996-ad6f-c74a85aed564", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:72c4b6bc-26be-51c9-ac6c-1887bf184a58", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2e0525a7-4430-59d0-aead-93368286d070", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4b493545-b367-56e4-a75b-622d11c6edce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:938bb600-35d6-53af-ba70-5a0f5a9aca96", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3535b579-0a4a-59ff-8acf-b70ec86c7e52", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:faf6b8b8-3e1c-5527-8359-d23e1a6cc036", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:49beae02-0b18-538c-934d-6fbb1542e641", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a328b1d7-0c62-551e-8c31-03e3d0fa444e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:934701d5-f46a-55cb-8f4e-249c6b47fd52", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5dab4181-e9c2-5c81-8474-93a2d9fd7481", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1b6fac22-022e-5282-9c2b-31e9c40934c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2a46eaea-8b5a-5920-a69c-a1644f9ba5fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0c31e047-0b50-5409-8d46-9580889ad0fd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:202470e3-d0a2-57a8-ae1e-59f04a47fb77", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bcc6fae7-534f-594a-89c6-bb9174ea175e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:96e42841-9c15-561d-96c5-e5153f19ee16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3ab36153-7eb0-5cb4-adad-5e28b3bf6978", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2f5176c9-9323-5e37-8e2b-57ccba4ab50b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7e504957-3248-5ef9-9f5a-a8d741646a07", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7c6c25cc-0dea-5e0f-96a8-0d6cb834f6bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:514b8999-31e4-5943-a91b-2b7912bf8984", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:811fe028-7d25-509c-b499-7b9376b483fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.10.RELEASE-tuxcare.1" } ] }