{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5571b0aa-0236-5f3f-aafa-8ac4ef71b413", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-webflux", "purl": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1", "version": "5.2.9.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:82520240-9683-50b0-8c81-3af71e2a406e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:25f71342-10b6-54f4-9f6e-9cebc6c9491d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ca77b40e-40bd-50e3-9dc1-b87dbb246388", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:76c2dffe-5fa8-5ffc-bda1-4cb61b6ba42b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:45779cd2-07e4-51e2-8fe6-b29841cd678c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f29d930a-bc0d-568e-85e3-2e17732abc72", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:52c9573d-43a6-54e5-8867-c0372a6c8b34", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:258397d3-2812-524e-a916-a3e90e773415", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5cd07546-bb92-5ae4-8550-cbdb0338d6fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e454d2a1-641c-5180-95bb-01d54dc4878d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d37d6402-3fa7-5cad-b5dd-847171715406", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2c5374f2-e187-55e0-9505-f5ea13d2049d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2a6a7317-38a1-50bb-9015-bb3ca600b086", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6c42b450-798d-501b-8ef7-32784d487b0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fc150bf9-97ae-5b8a-a712-0238efdbdb5a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:324b7a04-08d8-5b82-94bb-13080396d5ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:49ed9782-7895-53fc-aa53-3abc64247821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6271c0be-5b4a-5bd6-9706-32df8b6d3251", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d9133371-32c6-54a4-81bd-5b98d1d1a473", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux. not_affected \u2014 Spring Framework 5.2.9.RELEASE is not affected by CVE-2024-38820 because it lacks the vulnerable code pattern. CVE-2024-38820 fixes a locale-dependent case conversion bug in DataBinder's disallowedFields validation that was introduced by CVE-2022-22968. Version 5.2.9.RELEASE never received the CVE-2022-22968 fix, so it still uses case-SENSITIVE field matching (no toLowerCase calls) in DataBinde...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0e17200e-19b2-58e9-abee-ada57aec12b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:14d8b2bb-5456-5f1d-b8b8-7924f9ae37bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5df0fe82-38b0-581d-bffe-29329acda7c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:738830c7-c0cd-5887-8598-2f1ae1eb37c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:03384a19-5398-5699-bffc-d70195d75736", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:50a13fa7-b706-5cc1-ba2b-77ba3c3d7b1b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4de71fc8-d0ec-5111-85be-489a620f3dd7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:825d90ca-dbfe-597b-a2c8-338e9643395e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:041436a6-2c2f-5c92-837f-a96780d1e824", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a791e49c-a3f8-5c57-a70d-bd3e576d145b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:381ce681-5b59-5743-a70b-96f00ad4721a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ad953af7-ac84-5d6a-a6aa-fbcda781f111", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e70cae60-6298-50d8-a8b7-1fd5ee29383e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:44551b51-3b98-5e60-812a-513e2d8b5d6d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d336c8a3-dae9-5eca-ad73-f9662ba1c73c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:826e1928-e677-530b-a570-8e3882284541", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bc25c27c-f880-55bf-96b6-bc36016ee47b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:11263200-6556-5291-8777-b37ca1d3c118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:734ef19b-27ba-5dad-8c55-c4b4903830a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a9ab1ada-f60d-5a84-b3e4-37e732755b90", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b0d8a793-cf1b-5c3a-a3d2-70ea97d2a5bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:680e9b7e-21d6-57dc-a6f8-b618e4eeae02", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c96ce5d9-bf1f-5c43-b62f-9ff055fcdff7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5376e1d5-59df-5fba-b90b-9a1c9f483558", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f1ea1f14-29e5-553f-8b8d-ee5394f41330", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:74b77c93-892d-5bf9-97b4-38aee14be275", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:020b4579-3c55-5342-b8d7-642efc22da2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9cd3c1ad-470c-5bcd-969a-f4c39c9f8c55", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ed2a2bef-a96f-536f-a097-291f603ef884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ac7ee2fe-c051-5ee3-b752-aa8d696adb86", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:108deae1-b764-5e92-a21b-95c27632fcef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:76997db0-b41d-5387-ac7c-a43a24f5271c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cb5b0981-de81-5df1-b350-ed22861d34c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2c63cad2-76b7-5787-b161-9d4e6d51b58d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f9cd2367-3e5b-5cf9-bd1b-334e61885d68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:55519adb-11d7-594e-a2ea-981af1771946", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7fa05e90-67ec-5855-8be4-7861af37c2e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:adc4c2bb-cdea-54f4-963b-f1eb2b6ae737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9e83211d-2337-5d47-9d69-e86649cdf81f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE-tuxcare.1" } ] }