{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f7410c70-76a9-5c7e-8338-e1c83046d2f5", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jdbc", "purl": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2", "version": "5.2.11.RELEASE-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ca8fdbc0-82a4-5f27-8138-8960b44f06e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fb1e8132-806d-56bb-91b3-5844d20ddc3a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:36072df5-22f7-51b0-840f-54b5425f474b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:45d03b61-e08a-55fd-b747-61e847ef957f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fc06120b-7162-5f1c-82e2-fe2f409a0f88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:51f9d21e-6269-5409-994a-23076a93aea2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b2e28ae5-00c4-51bc-aaad-b352cce319c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:73e2ef1e-7f18-50b5-9a8d-b654d853428d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a9d8ab60-5529-5720-8e5d-d5358c43c00b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:43a07330-6e57-5d92-bfbd-cf09266e656b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e481248d-6061-5190-9ff9-f2d800f54cbd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e1fdec3c-830e-5d71-ba23-da7b379f4644", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:cee1d7d4-9aa4-5a2e-aee2-d460b61ea11c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:bd4025f5-a43b-5525-9c2e-cb504f4326ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:644443fd-2014-5119-ae91-edcc350e8a75", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ceb37294-daa3-5f56-99d2-81efdb26ec0b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:528e1a4b-65ed-5976-9ced-df22d9d9831c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c13fc085-548d-596f-a915-f28692bf533a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:45abd3ac-d316-5772-8b78-13b0aa6d8a2e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc. not_affected \u2014 Target version 5.2.11.RELEASE does not contain the vulnerable code pattern from CVE-2024-38820. This CVE specifically concerns improper use of .toLowerCase() without Locale.ROOT in DataBinder's disallowedFields handling, which was introduced by the CVE-2022-22968 fix. The target version predates that fix and does not perform any case conversion in setDisallowedFields() or isAllowed() methods. T...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:bef8affa-9ff7-5651-a7ad-d826c5209059", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:30e13875-1d7e-52e4-9154-e3b40ce2d469", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c3ea3050-d39d-5dfa-a76d-e6522b2989af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:9b40926c-4479-5645-ba3d-738e178318b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f455e05b-e60b-514b-9805-a1c6e7b2a456", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:56bbf3d4-db3e-5540-a5dd-f8a25f77525a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:cb6f47d9-296d-5bbe-aea7-8bdfe64b8398", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e4eeec26-fd11-5757-8e8f-ef4d3a6bcbb5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b24ac283-f0a9-558e-8068-84c98d186fdd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:19ef3c49-f080-5185-aaa0-2985390835c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:584dc255-57d5-5140-b884-a3d6a5cadbcc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:003a34f1-2ada-5e39-9ae4-d087ba877acf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fe43c085-a81c-5994-ac14-5a451741fcdd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4c5791fe-62e7-5cd6-a518-0a6bc1629be6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7f4c19b3-69de-5af2-8d35-1c67506c2466", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c7229d4c-5e2c-53f2-8e82-488cc1b452b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:284d3be5-c31f-5dab-9855-9f493a1c6809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:de7ae41f-93c5-5051-9a9c-b13f61c422ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:51c1da2b-ba1f-5200-b7c6-0e533663d1b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6e7d419d-ad30-506b-b4dd-f01c88d079c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:282e6fd9-1c95-5e85-aaf8-dca1336e16dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d2a342c7-6221-5420-b38f-70e03990172b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2e146484-b5d2-52cb-b3f2-c743ddfcc7b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:47a5ee72-93c8-5c71-b0af-6ea9b7eb4e12", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1b28e9db-8ed8-52ee-82c7-63eb9ccd2680", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b6bf73f6-5c72-5a10-9f12-9688606ad9cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d84ff350-181a-5efd-a035-15a86a0b719d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:69038a4b-34bd-5396-b4b9-01c16dcbacfc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1fdba19b-72f5-5109-8088-5fa5e2011120", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:52318b5d-76ed-5cca-8d02-c5fadd034f43", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:04c57861-cc6a-540d-bddf-3814ad2ba6cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:13c4b833-52bf-53f5-9238-044a73921139", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2bf78d9b-7538-5367-8ab5-f3eeb5147840", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:9a8b96ea-cfcd-5b93-a3fe-f80775fd95c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:cd9d17dc-2b0e-5c55-a77c-1abaf2dbd634", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e04cfe0a-4fb7-53f9-9ce2-7245afe2773c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:09b9e472-69a2-50d4-971a-04f149d3b21b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:71cb66a4-1572-51e6-9446-d30d8c8188fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5025e6bc-8ea1-5461-9bd8-917dbfd97edd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-jdbc." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.11.RELEASE-tuxcare.2" } ] }