{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ee5edbff-34f1-5cdc-a3fc-6323c46372ee", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-oxm", "purl": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1", "version": "5.2.8.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2f78f5f2-c990-57ff-86ca-ba3061d70389", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4b5fb9e0-2c4b-5382-8431-d073ae7a7d05", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4c0a7d60-14be-56a4-a339-3241341e7612", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:69baa3e4-a2ef-5315-abf2-4ec10682493f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:82600d81-6e7f-5de5-8537-26151f8db48c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:45f18c6c-7feb-5030-b7b9-8097ffef4eba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6e62578c-f3c8-5c8c-9b9f-d8ea64323470", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:77ac6f53-4c82-5ed1-942d-a642ca28dce1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e1f7fe69-ed42-50cb-939e-5d82439e71a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4a4d366e-95d3-538f-be08-48b1b0483e09", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:308f4d4b-b156-57cd-8942-cb4649909515", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3455331c-2c49-5ec2-9ab0-1350509b34b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ea9ae9b7-82eb-5229-bbd5-5f02ac74f2eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3296ca8b-98c1-5d9e-8b9b-9d0da3d9155c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2d97e419-c4fd-5838-9325-4a4c607c3eae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fb17b9a4-d0fa-5c6a-ab57-e6ed081b985f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c1c87a4a-e1d4-5e9f-b19a-e9a330862462", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f8e0513a-af94-5da5-993d-847153ed83af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:790e2556-a7fe-57b1-8af0-2816ae1a8a71", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6144bc8c-2db4-59d0-9793-65940e58ecd6", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm. not_affected \u2014 Spring Framework 5.2.8.RELEASE is not affected by CVE-2024-38820. The vulnerability requires locale-dependent toLowerCase() usage in DataBinder's disallowedFields matching, a code pattern introduced by the CVE-2022-22968 fix in later versions (5.2.13+, 5.3.x+). Version 5.2.8.RELEASE (July 2020) predates that fix and uses case-sensitive direct matching without any toLowerCase() calls. The vulner...", "justification": "code_not_reachable" } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1ad61c1a-23e7-5bf2-940c-e7f724784798", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8cbf8f52-6c52-528a-a314-84c87ae6e790", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5891b619-97fb-5b6c-ab3e-0fc362876d85", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm. not_affected \u2014 Version 5.2.8.RELEASE is not affected by CVE-2025-41234. The vulnerable code pattern (PRINTABLE BitSet without double-quote encoding) was introduced in version 6.0+ on Feb 1, 2023, approximately 2.5 years after 5.2.8.RELEASE was released (July 21, 2020). In 5.2.8, when using non-ASCII charsets, only the filename* parameter is output, and double-quotes are automatically percent-encoded because t...", "justification": "code_not_present" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f9aceb0f-d4e9-5f73-a31f-f9ed4a3846f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d0ae6cb9-2306-5813-9869-395bf7ddf8fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d6c60ad5-15dc-578b-9677-145bd05cb69e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1de78713-2d13-50ab-a879-5fa309a98740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6563a988-6c96-5803-bf16-fb0e9cdc09d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:108c4250-04a7-5fde-8ff7-300fcc4a5df9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4d3856ba-97cc-5ca8-8f0e-c9632a96e445", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c9477b79-148d-5cbb-94bc-6e260c0945c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f0a8fc9f-1eab-500f-abd2-590e39780a0b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:28eb37f6-7780-5ab5-9568-35937754c828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a60f4a60-cabb-55b5-b42e-49c96b249b42", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ff757777-bf93-5867-b532-59cd3c4b3e39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cb47a20f-c026-5ab5-9ba9-cbef0e330f52", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:954fec5c-c60a-5aa7-8300-88498429ecec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c1283aa0-19cf-5303-8b3e-6852a62f3c77", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5befbdb7-b499-5267-8d05-33ac6093133c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:421f064f-5efc-511a-a0bf-8fd620169d6a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:158d80da-01c4-5e79-a2d0-17a0547cc799", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ae0d6bba-ac54-5a76-8a66-cbdb3fb45f11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fed96dbb-fe55-5652-86d0-f31580d0852a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3ee3e4a2-6d9a-5fb0-8b82-00cc218a1a9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8e183006-dce1-540d-8fcf-f2326c427e9c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3b863e5c-768d-5aa5-a63d-7b110de8c42c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0eb3b664-996d-5a4b-a428-c0d7abfe5a78", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:29a73a47-9cec-58b4-9f44-fc238e89b9f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:da4b2b2b-3ab9-5020-bf06-ce3890251135", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:22dda94c-c985-5906-b274-a782466e3e2c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3ae4cd4d-a93a-52d3-951a-4e56b6198672", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b73759f8-f5a0-556d-b5a1-b850970a0bb0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fc4de5bb-e9b6-5b5a-9ea0-e5e78cdd4faf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8c17340e-ef14-5246-8cda-8a030307da92", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2f27c44d-a8a4-54cd-9e56-301ef2aaafcd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5f23a839-6fda-5ff4-8e03-efce212b85eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:73dfcfd3-2e66-5ddb-9c77-958c5255f830", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3b39d2f3-c65d-5b04-a05f-f1e992e9d38b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:37aad3c7-9d5a-50c5-9a33-3494c41de573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d620509f-5796-5c26-856f-9575fbe09949", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:40d0836a-02c3-5a26-9128-8a61cd30fb58", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.8.RELEASE-tuxcare.1" } ] }