{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9730e1d7-5e1a-5715-bcd3-f48bdc740fdb", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-web", "purl": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1", "version": "5.2.9.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8a9f5b7b-74fb-5b76-b5c9-7fac982fd23e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:237f4f1a-079c-525b-8162-46ce98bb26f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7e600807-3d9a-505b-92a7-31ec678f1323", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5a5bfb81-a560-5544-9a5f-c16a67ba5f9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0d708375-abd2-545e-b28b-c98806fbd0ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ba7c4a07-33f8-5258-8951-580bd20018db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b28b8a9b-c219-5ee1-b217-54eb86456434", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ad8559c7-5274-5bb3-acca-bc92b254d32f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6fd6c732-6623-5a76-b9ec-5cb7caafd7a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e87848b5-8eb6-5af7-a90d-c8f230f70ae4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c493ee5c-3550-57b9-80a3-54b1c9246316", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:70211e24-ecca-5611-ace0-6cb4654fb494", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0574da33-eb2d-5604-836f-1076c4b511ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4979080b-3310-5b54-b14b-56750d1d97b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fd0d62f3-35f8-5f1b-8ca5-1012d1a15bc4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e36b782f-6052-59c2-90b5-2c830479949f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:24e6293d-50d0-57b4-b402-cffbd7723c93", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ac51b3f8-4731-58a5-a716-43a54b516e49", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:28b71c70-4945-523b-ba81-5223c5004db8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web. not_affected \u2014 Spring Framework 5.2.9.RELEASE is not affected by CVE-2024-38820 because it lacks the vulnerable code pattern. CVE-2024-38820 fixes a locale-dependent case conversion bug in DataBinder's disallowedFields validation that was introduced by CVE-2022-22968. Version 5.2.9.RELEASE never received the CVE-2022-22968 fix, so it still uses case-SENSITIVE field matching (no toLowerCase calls) in DataBinde...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6d6e6948-5dc3-5afa-86b5-f3437ac6b0df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:84ebb186-5e68-5f85-bd85-ef2df75793ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ccb4ec26-3c64-5bfc-8d1b-e70b94536a73", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c76b8ea1-08d6-5419-a67b-b5993cfc9910", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b7cfd976-8a4a-5d81-ab79-21f47adf694a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:25af6e7c-5574-5322-a5e2-9a3f44719924", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4dc4d015-0562-50f5-ac92-0e2ecb2c7bef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3e68a037-7f13-5a6b-9804-5197473660ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bda2347c-f97b-583b-b179-4c5c3ef35833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bfb4ac2d-e524-5fed-821c-a7bb5cbdb8d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ea818d7a-1837-5c35-8bd1-b4770c19e8c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:61d9f004-4b4e-53d8-80b4-0303dccd5a86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d26aea78-8b9b-5d9f-a5b1-ed060e77f2ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:11b37c18-3cdb-5999-9277-946e5e810a7b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:581c0849-ad32-5578-af52-2edcd1160225", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:152bc2f1-f0ef-5ee6-b6c8-35349d4779a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e37c68b9-dd49-5875-936e-21928366db57", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3e5ab8b1-6615-549b-aa5f-9cf5e6fbf018", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fcc467b9-c425-5df1-b581-837f0c45a3b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:98d3feb7-fcb9-5878-925b-9b4462180cf3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e7c9dd4e-a26b-5438-a8cc-3d7ebc2df41b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6144da24-868e-5f22-9630-d4bfa34d19f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1a41955e-604a-56c5-89cd-7489107f28ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b087c2b0-28f3-5b45-826d-125ae24dd72a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9ab22ac0-e521-5e0e-bf27-3f99db60b2fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:872e31b6-1504-566f-8e95-7d3fb32c7d3b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:14c586ce-1587-5492-93de-4465a3bfa472", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2070b12c-425b-538c-bb82-147cfa439f6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e3cb95bc-7df4-52ea-b973-72d5e3f16e1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:29a89700-a3ae-5fd0-8a6b-b26978e9135f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d79fe8bc-2144-5e29-8c84-b3266a998cad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c0032694-1cb5-5198-be39-93b584da0bca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:40514f0f-1567-5fa0-a6b9-18c285938b7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fc7f6889-0d80-5ca5-8f38-f26d4c666b16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a649568c-94cc-5d28-b3c0-d04ee8fb76dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:81885749-8684-5f06-abe4-9783d84edfea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a419c990-56eb-53cc-92f0-b5a15b608595", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3762c321-d26c-50df-b76c-66bb50359db6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7c81ace1-304a-538f-ae15-cee8b01a7826", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-web." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.9.RELEASE-tuxcare.1" } ] }