{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e5736d5c-b7f2-5817-93be-2e2111ef37ed", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jdbc", "purl": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1", "version": "5.2.9.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0da1ffd3-ddbf-565b-9283-6c769c88b21c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e462e52a-2e88-5069-834c-db2a7e2e4acd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ace62910-9007-5e76-ac3e-17fc525166ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:212e17ae-c670-5978-9e9c-d788f94d7e53", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8e3c8791-0860-5d63-accb-374665cc7c0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2c265c82-7a55-550a-ae12-8b7b142bdb99", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bb4d9e49-4850-53f8-a6ee-c54c4506b573", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cce5c46d-dc9a-540f-8034-7724121aef0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:57eca76d-204b-5d51-a698-431c43b1034b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bea40c2f-36ee-5d83-92d4-fee1a7edb681", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f15ed9a3-0527-5952-9c33-1a5e9da46589", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2d6df6cb-f9e7-57e9-a7a2-7729d137ac84", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5f08f23e-44c6-51df-97a1-5b08a15216e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9ee195a4-07da-506a-8d46-a44cb2a4f773", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:381769ce-9e31-5a3f-b7bf-d1cc5d448b9e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:925936c5-bcb9-508c-bb59-4b095e0efca2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0773edcb-f67e-545d-8fe8-a2256bb57e76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:db441287-fe7e-5fa0-8df1-84c049ee379e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f912923c-02e8-554c-9788-0dd76f4a14e2", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc. not_affected \u2014 Spring Framework 5.2.9.RELEASE is not affected by CVE-2024-38820 because it lacks the vulnerable code pattern. CVE-2024-38820 fixes a locale-dependent case conversion bug in DataBinder's disallowedFields validation that was introduced by CVE-2022-22968. Version 5.2.9.RELEASE never received the CVE-2022-22968 fix, so it still uses case-SENSITIVE field matching (no toLowerCase calls) in DataBinde...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:58a35cd0-374a-5272-a23d-a7974c91d605", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:19f57a33-cfda-5523-84c5-066673deb0cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b1378ab9-fe37-50c9-8764-5d2bfc2f3c84", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b8124792-4677-5bfd-886e-e37e4f7859d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:428f004a-41a6-5bfc-a8a0-0cc63acaeba8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:69b15b8f-6471-520f-ab90-1bb43ea4ac2a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e2bb25ed-e99a-5a23-b3a2-6da30f52ef63", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:25275f73-39eb-57c2-8df6-b77df5d128ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c6e18e9a-9a3c-5c3d-8b5b-17635b94795b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b6aeda18-5c6f-5147-a4ea-d7643f269cb5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6efc02e9-8730-58b9-9679-fa0d07af7672", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:51fda20d-06f1-5fbc-b83b-09e956c93af2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bf8bc28e-83f1-5c04-a4ad-e3c49407d809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fbbf595f-b8ce-5497-a52b-494ac02559fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:206fb3a8-bfab-5b60-ab93-48161fbfed37", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f2cc9dca-a4ef-58a0-a29a-7428eb2b7d9c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:de819c1d-2f40-5edd-ac42-4e62b170fc2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6a44bdf8-590e-588d-ac15-94e188691767", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b539303c-24e2-5b10-98d5-435b4844526c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:63419384-e435-5c06-afea-da500500fe95", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d2638dc8-a099-573c-9f71-61badbd46f69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a66d2c20-20e6-530b-84bf-91a34fdf82a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b50cb1c5-6523-5b7d-8537-56904c45a57b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:09143cb9-ae6e-5b4e-a26d-d7e296ef7079", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:950c09d0-178a-5880-afbc-65aec8468aa7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4f889c61-66ae-5b7d-abef-16301cd0e4ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8a632339-15cf-544a-ba40-898c52aae449", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:90e11ee6-b4f4-57f6-8f08-ce97d2650f92", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a5026c2d-38d5-569c-8d7b-ae0c77966bec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9b2c4dff-22bd-5e78-8f33-f84b2085377a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cb39e88f-e3fa-5d37-b5e6-94c9da280c30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5c9da032-5838-5cc4-8625-ed3b36444e10", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:86161069-396a-59fd-9502-9af02a087a16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7e2f3be2-3f1f-529e-b721-f77735a4f58a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2aa9b7f1-7dd3-5706-a9e2-dc70eca591f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c2c21a9c-ab89-5327-999c-7c0a6603fc18", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4bcc4a55-7f51-5145-b33d-ba5706f04395", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:45d98a0c-e913-5eea-8159-eee67d78de68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f62500ff-e0c8-5138-9390-74059700c59d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.9.RELEASE-tuxcare.1" } ] }