{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:58e17a22-6674-5344-9da2-59fe687dffd4", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring", "purl": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1", "version": "5.2.10.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:381dda0a-97ca-50c2-a777-6a04e1cb3649", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6369dcfd-27f1-53c0-9164-5f99f135121e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:315f8f36-4175-5820-b1eb-f9b4ce902103", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d53c11e3-ee5b-5ce1-a1d1-5099fe29f965", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4c997ee8-2f00-5b94-b5d9-f2d35024203c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a271b69b-acaa-581b-ab2c-4fa316269227", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9e16d55f-5eee-5e2f-873c-1227fe4c1cfb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e4129851-386e-5156-89d1-1f71b5bb9cc5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9ddf62d4-9b93-59cb-8df0-5710cf610100", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3755f84d-9881-5f1b-9a0b-55650da63bbd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:08caf03a-8052-5da3-bcf5-25e56e79de74", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1fbb69fe-3b8c-5a3d-8c98-585d4bb62b12", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:58647de6-8567-5946-b06d-ba607f0a7eb8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3e4fe43a-116f-560c-a55d-75258748e135", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2fc1f7f9-5d7a-578b-8900-39f902b6afb1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:aed6ba2e-49ab-5fa1-80c8-c2205e668363", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c29184e6-d9e2-5cec-be5c-26b5ccafa783", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:341d7439-7d8d-51bb-9481-14939afc2bc4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:844ab4ac-7044-5969-aca3-b86694997a06", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring. not_affected \u2014 Version 5.2.10.RELEASE does not contain the vulnerable code pattern described in CVE-2024-38820. This CVE specifically affects the fix for CVE-2022-22968, which introduced case-insensitive field matching using String.toLowerCase() without a Locale parameter. The target version uses case-sensitive matching and does not call toLowerCase() in its DataBinder field validation logic. Therefore, the l...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d67f0c6a-a3ee-5f4f-b4da-88b70c02bf67", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c6fe296f-0deb-5a27-9150-8f3954ffc0d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bf4d387c-e03f-5b62-8964-9cdaad0f287a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:99f68bae-a60f-5456-8040-96babc3884ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:179ce973-cc5f-554b-8cdc-3c1fd43ef6dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0971f48c-7426-5bd7-adba-55deaee18030", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:34adcc91-8b53-51f1-a02f-ef7370d5f411", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8eccd94f-e134-5ce8-8b46-4fee213cd3e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:283902a7-3f19-597c-a459-7bcaa83fc7c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:edd769cf-cd03-50e7-99b6-008f072a544e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f944f997-26f9-5174-8979-03d6ad26197d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d03e4260-f4eb-553d-9fa6-64818cf9353c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring. not_affected \u2014 Version 5.2.10.RELEASE is not affected by CVE-2026-41840. The vulnerability targets the PartGenerator/MultipartParser multipart parsing implementation introduced in Spring Framework 5.3.0. Version 5.2.10 (released October 2020, before 5.3.0) uses a completely different Synchronoss-based multipart parsing architecture that does not have the vulnerable BodyToken buffering mechanism. The vulnerabl...", "justification": "code_not_present" } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1dbfd26f-cecb-5b7d-81a6-c5ca452ac610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:23e7876e-a714-5c5c-a757-d2bd73943271", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8c3bae37-b26d-5603-b0f3-24e6bbce1698", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b943f180-8dce-5d14-8bd5-d170ac59bd2e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6bb57b79-36ce-57c1-8398-6d6e6e7ab2f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ded6e2ad-8d30-5760-ab8a-9f7877d6165b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0b8b2c6e-19b2-5379-97a7-75c9afe45745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c71d5fc4-f108-5652-b181-4b1c0f5a191c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e74d8a57-a711-54c9-89af-d2e98ce40c29", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5bcd1e1e-d023-50b4-bbd9-b6375493abb4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f2f6d0c3-ddef-5f6f-b954-c065363cb4b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e0c58687-4659-5ac9-b4f7-cafaff5f3b9c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:694061f3-94a6-5cf8-9321-9b244033f5b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:71313c56-841f-5e19-82fc-bd42de60d5c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7443123e-187f-5a3a-80d8-a6e7d1c4e016", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4db35208-0614-57bf-ba83-929f6931b684", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8005b6f9-8126-50dc-9110-e0e9b46f36fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ef8ab507-b8e7-5b76-8da3-f46e66696a28", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:355dfc71-7614-51d7-bbac-8ac716d77a6a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:77835072-ca9e-59e0-a5fa-285311b57f17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ce469fa6-84ec-5180-af21-ba83bd05cc11", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:93f1e795-bbbc-54ee-8470-59c02cff9889", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:54ba9bb5-7e70-5c91-870d-225d692cf368", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:edd3444a-3749-536c-b2db-35d32bf041c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4726396a-bcad-560b-b0b2-410ae3f0db35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e45e116f-c8f0-57be-9127-5257277cf8fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:95bbc56d-8ae6-591b-aaa9-9e609754e431", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring@5.2.10.RELEASE-tuxcare.1" } ] }