{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2db8abb9-7611-5c38-963b-0dc550050bbb", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring", "purl": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2", "version": "5.2.11.RELEASE-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5c77de59-cff7-55f0-93c8-96d84a7b12f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:bb006b8c-22b7-593e-963a-d66c10986e55", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d258e191-e1af-5195-9636-0c925514a6e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:864ef88e-fd95-52ff-9661-71920129734d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:bc7711f6-7548-5518-981a-b5ee23e66c36", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:cb4a17b0-7c1d-5566-93d9-06256d07f608", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:9b037c2b-0a7f-5068-a152-a7a0dca595b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:77690378-f6b6-5378-8207-63c222526b22", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6472c191-e838-5032-a3b1-d5f2b8ac1d28", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:951a2a1b-dd3c-553b-99b3-01fdd436f348", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:18ee1077-2ec8-5779-8c89-c2fe3f3d6fe1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8190197a-fb80-5fa6-8f48-ae5307ef48c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d74c39aa-e744-5602-a4b7-010aa3397f5c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6ff32c69-f04f-5d5d-89c9-bd6b291a6a6e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d9c29fba-ca62-58e7-a414-c5a736794534", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:0bfbec7d-9015-5f28-9dc3-21b7e7f703f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:add99f2d-b547-5d29-971e-40ef3d889afc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6ba91a25-504a-5298-a6f3-34ed108d828c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:751b7f04-7817-5af0-b14a-1345d100ec63", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring. not_affected \u2014 Target version 5.2.11.RELEASE does not contain the vulnerable code pattern from CVE-2024-38820. This CVE specifically concerns improper use of .toLowerCase() without Locale.ROOT in DataBinder's disallowedFields handling, which was introduced by the CVE-2022-22968 fix. The target version predates that fix and does not perform any case conversion in setDisallowedFields() or isAllowed() methods. T...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:70ff8039-2920-5d32-b662-4242a4c35017", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:03fe1f45-6661-5172-8995-304372ec1aad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d299c690-84e8-5eb9-b893-6d4eb41b2b09", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:993af25d-5bc2-5cdb-928b-2951ed4069f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a734e33b-adff-5155-a967-7b6bcfedf9df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a49a852d-721d-5842-bd20-0b6a597aaf68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:549c924f-ef65-539e-8d8b-5984ca659832", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b543e1fb-cdeb-59b8-8b9b-18cf198fa4de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:0ac51b9d-cceb-5541-9ac7-1a05878887bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7fdec848-5e36-58fd-968c-9e79009d6161", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a9fb4046-522b-56d0-b554-0aba58481b65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7df706da-ea20-59ca-af89-5feef72a74da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:9e7767fa-820c-538d-a099-b32ad3fcefd4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:699c767d-0472-5977-a655-1e8408439bd0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b8551bd4-664d-5e25-95cd-1cd17d8ac421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fe8f7454-5d0b-5aff-af68-d0cc7a795aa6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ac05b7a6-fae0-5e2c-8232-959d69550393", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:57015fbe-34f1-5605-a045-840ebec67c1a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:64a1848d-7811-5303-b081-b439c836c039", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:24a0fa9c-ef16-5466-87ca-ccb4afd21b0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8cc70b11-114a-546e-9733-7b2b0b0a24c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6bc30db6-ba65-563c-b8d3-9269835dc642", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:84b062cb-c4b2-5e5b-a239-59bc5fa634df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f26c3993-52e4-5f09-a9ea-7beb4367691b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b9afb73a-6be4-5f0a-91e7-272bce3127a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a422a382-d176-550c-9091-d5875ee2c791", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d4d5a58e-e312-518c-a7a8-a5601b329b6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:84d5c00e-8ce8-5067-b8ce-3bc12274d776", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5d6f092f-01b3-55c0-a43d-f435fc5e7863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ad7f3294-c5e6-50c5-98a9-ddde594f11a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6893bf9c-a3aa-5df5-b130-a5ce1da22efb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:980e81c2-d1cb-5d47-a4c3-a4ac69ba1f20", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7b7e4d58-d5d7-5b4d-b555-90aafa7c88da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8874aacc-038a-5627-8bd5-110893171e7c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:cc42fddf-d3ca-502f-99dd-097e6fd8ba43", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:364a57e7-436d-5267-ab45-03b7cef8972f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2307c6a4-ebc1-5764-83dd-946b0fbf2812", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:21246b88-60d1-502a-b86e-4575b2767bf3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:403ee867-9dfa-5829-849d-adc4e8b8217a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring@5.2.11.RELEASE-tuxcare.2" } ] }