{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:22e14eb9-8312-56d1-9d38-fa7c6d41b9b7", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-websocket", "purl": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2", "version": "5.2.11.RELEASE-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:176eeee1-422b-5ae9-a69f-03db8472879e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8bcde408-85f3-5f19-84c9-7e1d3e8c0b4f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2e298a6b-607b-5cae-91fa-453c217d7e4b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:0425a859-3580-5995-9ef1-5f2c15d919c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2a4be5d3-ba25-5b96-afe7-4993f043d4aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:22b1eeed-8879-51bf-bb20-aa86b57b4714", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1175df22-05ab-5ab5-8151-b004ba589786", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fdb82190-bb5f-526a-8794-57fefc5636e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:672a7ed6-efc0-5b1a-8e7e-f2bb56e43feb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:0efee4ae-2bf8-56b8-950a-eccc0d326ae3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b563e114-48c5-5f22-945c-f695347b780a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:cd553fb9-bc77-572f-90a1-2c0f1494fb6c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d1f69eef-f777-5546-888b-a7cca68969ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7adeea84-31ab-5f9f-80b8-fcbe816578e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5a030c6b-5732-5dd3-8c51-c554564a6ec4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:250b376e-0dfe-5519-aa24-6adeaf67afd1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:9e16e08c-16da-583b-843f-e4e453b70e61", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7339b02e-0dea-56f8-91af-3ca6b26ad4f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:38701621-06b3-5698-adf6-30bbf598a4d1", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket. not_affected \u2014 Target version 5.2.11.RELEASE does not contain the vulnerable code pattern from CVE-2024-38820. This CVE specifically concerns improper use of .toLowerCase() without Locale.ROOT in DataBinder's disallowedFields handling, which was introduced by the CVE-2022-22968 fix. The target version predates that fix and does not perform any case conversion in setDisallowedFields() or isAllowed() methods. T...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b4883215-1a42-5e3b-8ccb-3848896c0d0c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:111ff898-9fd6-5ab1-8046-6cea15e687c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d08db290-e795-58ef-bbbe-cb858e5103ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4889a70f-1779-5289-948f-cc13e791dcc0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a7d3c0ee-2802-56c6-9411-edcfe8a1942f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:eae43de1-d440-5d88-9267-45f5442402e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:cdec9fe7-7e66-5f86-8116-5998fd641ad9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e4ecdeed-2a6e-507f-b08f-025fcc048b63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2cf0981e-e9b5-5438-a2a9-82e74cffd634", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8e200d23-4d2f-5728-80a5-edf51d23e354", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:20836090-38c8-51c8-b151-18f6b4949a19", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e11a66b4-2226-59e9-a290-3b26beae4fe2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:84857f5b-4db4-50c8-91f6-2a1b2f271363", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:cd9b4309-cc64-5573-90f3-f185a63fd260", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:edbe1a05-c41d-58e7-a8f2-4cf103bb1687", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:78ce980b-9cd8-5b4c-b132-e38c7277639b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:56247078-4963-5512-b67a-dc443ff187ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d54f93e8-ada4-5580-b87b-789c7de4df03", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:258e3751-33c7-5b22-81e7-824acaa8d377", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b74feb32-6719-5a65-8194-4b53ccf22710", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fe19c23d-8da2-58a9-bbe6-3f8370ebe9bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a6a45867-b9b8-5606-97d8-74e2d450e5c2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f2181547-ebe1-5d52-8ac9-4c530b783243", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:08adc83c-1b9a-53b4-8ec2-fb17da49e08c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:658e5428-f5b7-5126-a9dc-95568fc693eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:cb47f18a-f2fa-5533-b374-c1003011afd6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:98f463d0-611d-58de-9d0d-51f076abd697", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c8699fc1-ae1a-5474-ad01-7d29e473a755", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ad3fa14c-d949-5205-b992-7e9694f83463", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2324d346-c18b-50a5-bd42-34c4831894b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b36befad-e1f6-53fe-a46e-93af6dc12fac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d60fa1dd-4a76-5562-9b5d-4338485abd0c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4b5a3c03-e08e-5659-a563-c023d83ba947", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c42b099c-ea7c-58b9-9f65-ef401069069e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:bb30fa12-7a47-54fa-8949-b192b4001956", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e5fa6bed-b51b-5101-babc-ddd2e0fcd7a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d8dfa2ea-3457-506e-ab09-70a7937f49cb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ce7c1f61-e03e-58ec-a460-d01807656d2e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b821fe79-32cd-50f6-8311-a44747b4a32f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-websocket." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.11.RELEASE-tuxcare.2" } ] }