{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:91b2dac5-74d9-5326-ae00-12041c6e6005", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-tx", "purl": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1", "version": "5.2.10.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b06a6cb9-d8a1-58af-af3a-1180dd294db9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c6a25304-f830-5e33-8da2-193731a74872", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:97dfddce-0343-5000-883e-28b5824e78a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b10c4afe-a204-5a38-bdb1-9cc8a5002a1d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1b59d5fc-a7c2-5d78-b0dd-4c710fe1d09e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:270116aa-ff71-56e1-a0c9-e04b59f8c344", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4d02cbc9-adb6-5459-a221-21cab3207fec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4b816582-0368-5390-9305-a4d07cf5ddd8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a5f3c588-635f-50c7-859b-9fd271ddfedf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a935f132-0184-5759-a2cf-c7215d9e17e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:57c5060b-7591-50e4-a2f2-0c9d6e411d23", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6dad0af6-6239-5e0c-9fbb-96a043c5b302", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:418f2787-c643-58be-b12c-c3f1ba21f171", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d73067eb-d42e-510d-988b-d42a80b8779f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4bacd15d-b31b-59c1-ab73-bf59cb5a1d13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d2a5acc4-c5b0-5a7f-99e3-88f3a3d15d1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:76ecb356-9f99-5455-b300-43c7cf6487bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1970ead7-6e6b-5dc0-9f66-8cfab5b24993", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bd2ff76d-086e-5ba9-9ce6-f64965f5c11e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx. not_affected \u2014 Version 5.2.10.RELEASE does not contain the vulnerable code pattern described in CVE-2024-38820. This CVE specifically affects the fix for CVE-2022-22968, which introduced case-insensitive field matching using String.toLowerCase() without a Locale parameter. The target version uses case-sensitive matching and does not call toLowerCase() in its DataBinder field validation logic. Therefore, the l...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3180e1ac-b23b-5762-a6fe-cb213d837cf8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9c931e58-72e0-54a6-a10e-e0d6ef6fc746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:657fd9d0-0b22-5b26-9a52-a2818c6a2dfd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:51c2e34a-b910-5e8a-902a-b671061d9a61", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3bc102d0-961f-54e3-b598-2c50aae96753", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b9b7fa12-3cd5-5779-b7c3-1f7811c91f38", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:23c82c95-c851-5fef-b6d2-f1514ef97104", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4a60cecf-d190-5ae8-8f51-83e133ceca77", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bdbcffac-8fcb-5f82-a46e-dfcd1e57a161", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:84777da2-41db-5b88-ba9b-2b2586e68086", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cbc9f498-c94a-5ce5-bdb0-030144110923", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b115c336-1d99-5095-8275-dcfbd0b6a4a5", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx. not_affected \u2014 Version 5.2.10.RELEASE is not affected by CVE-2026-41840. The vulnerability targets the PartGenerator/MultipartParser multipart parsing implementation introduced in Spring Framework 5.3.0. Version 5.2.10 (released October 2020, before 5.3.0) uses a completely different Synchronoss-based multipart parsing architecture that does not have the vulnerable BodyToken buffering mechanism. The vulnerabl...", "justification": "code_not_present" } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1ea11696-6960-5587-87b0-c5ba3995807d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:90b6b786-5116-50c9-8984-830cd8d2e412", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2d2953b5-93a0-5ee0-8e29-f4fc312dbbec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:89fbe4ac-c5ab-593c-9a20-36372018df28", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:74eed1b1-c524-5970-9572-652756c495ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8e8be33e-ce1f-5826-8b5e-d66e19367a3b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d9f7aa99-ceb3-5df9-8cc8-10b3df9f07f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ce95304c-0299-5107-8299-e02e36813023", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a84504c7-b45b-5ba2-9caf-282ce6cd6176", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:35ef0af5-35a6-53dd-b7ba-0d2c961e4a49", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2f41e64c-9b77-5d65-8649-61f883ce767c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:111833ed-907b-595f-a78d-71dfd916c141", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:56bdcef4-f2fb-547b-a31e-6fc398ce7a7f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8e8d3c73-c101-5291-a103-1233a799a5f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:73a0d8b8-1450-51e6-aa44-433da6b4891c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dd9023be-b02c-55f7-9da5-e91249123b6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0a186eb5-16bd-53d4-b11e-1987daea11da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:59cb5790-5255-54f0-9b39-e0bb4a1447c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6fdee789-a168-5bfd-b816-48a89632c347", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:312f0a55-42c2-5619-9fc6-90fcb2326230", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6c2512c3-ea7f-5c41-a7ee-1c91b64ef9f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6aa4384b-f428-533c-a198-c566524bc681", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4de28eef-aac0-5884-9578-818a7b3c98db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c9b43e24-4489-525a-a0f6-9840e1a6ec79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3d69f506-b668-5301-88ca-97fb8a4c95ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cf5113e5-b39b-55d4-a27b-4a0b5b0e4fba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5a13df0e-d710-53a3-b34b-b598bac615e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-tx." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.10.RELEASE-tuxcare.1" } ] }