{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d605cf9f-2081-5868-9aa4-97c047aeae54", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring", "purl": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1", "version": "5.2.8.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:342137a9-ac04-58f8-9293-86cfad8b3eb4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:33a99631-3110-5618-8225-1510fa92f87b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f41d4a4f-cc64-59a8-853b-8369ce834a0f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:77f72fba-01cd-53d6-a836-bbe49ab4236f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2a43e6a6-9be3-5166-8ef8-9a60f5dc3f88", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:10089777-9b9f-56b2-9861-b72b3cb5c6c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d4cb9524-b399-5ef1-a8ec-db465f10c452", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:069e52c7-0e8d-5bd7-a832-766f461b4e05", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:329d09dc-c881-5449-a34e-a844e2c003e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9dcbe688-60fb-554d-90d8-e12e6f6a91d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9f3d4ced-2cdc-59d7-8693-61894ce85c35", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:713c63b0-df9f-5650-b2b4-dfed4da24f92", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a1913aff-b750-546c-853f-93fce9c17d6f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:099875a0-36b2-5db7-b4d7-0c69fd2a6bb5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7de1ea96-6d60-5c71-b777-c534ff20634a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6ddd949f-e796-5b02-a861-630d9a46ae05", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:75785864-eec0-5ba1-92f3-7efe69f786e0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:05939c7f-de6e-550c-b5db-d1ddde1fc0b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2473e70a-ce90-522e-a586-1e1c23dd0bf9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0b8f7079-7255-5bf3-8b28-c0cac0a0ff50", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring. not_affected \u2014 Spring Framework 5.2.8.RELEASE is not affected by CVE-2024-38820. The vulnerability requires locale-dependent toLowerCase() usage in DataBinder's disallowedFields matching, a code pattern introduced by the CVE-2022-22968 fix in later versions (5.2.13+, 5.3.x+). Version 5.2.8.RELEASE (July 2020) predates that fix and uses case-sensitive direct matching without any toLowerCase() calls. The vulner...", "justification": "code_not_reachable" } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:83e49fb6-945b-5257-b5b6-f14ebc53a6d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6ea83575-c105-5809-af1b-ada03083c286", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:795a1afd-9ab9-5954-8794-15204bf69c7a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring. not_affected \u2014 Version 5.2.8.RELEASE is not affected by CVE-2025-41234. The vulnerable code pattern (PRINTABLE BitSet without double-quote encoding) was introduced in version 6.0+ on Feb 1, 2023, approximately 2.5 years after 5.2.8.RELEASE was released (July 21, 2020). In 5.2.8, when using non-ASCII charsets, only the filename* parameter is output, and double-quotes are automatically percent-encoded because t...", "justification": "code_not_present" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a083a94e-70ff-505e-86cb-250cde105eef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fef6f6ea-cdda-510c-a869-256ac3dee363", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:37cc1350-7a03-533e-b856-b7e0c673f31e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8ab5a03b-8a18-5e0f-a27e-68e824dee26f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a4e1d58b-d06b-550f-b979-4bc46b4d6fff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ec464d43-b6cf-594d-9fe4-9844d4cf9ab8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ef2e23fc-8912-5f8e-a6d9-12259e9b39b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b9c44040-cd36-5ddf-8810-5d4ccf474628", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e993d4d5-3cf4-5362-94fa-1bb2b777a6ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f16ac601-df0a-5a2d-87ec-adfb198b1580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7a2360f9-0861-5422-be23-56659240d537", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:eecaef33-ed78-5b52-8b39-a1663e7d875b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9cbeb35e-f158-5645-a1d0-3b8549a04cf4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7538e89b-2746-5881-ac24-cdf5855d4a10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9374fd84-ca1c-5854-ba74-b6b76e479092", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ef12fb4b-2122-5eab-a9de-7b6ef111508d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c5d29663-5be0-519f-893a-250b9e5d7ca3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2e36c3b2-fbcb-5915-b4de-7085b5beba39", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9f50ce6a-2768-58b7-bb3a-a9d3818d7fd3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c9695222-3606-5172-b05b-7cfefa924107", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3a982fb4-13dd-55ff-b861-b7da559bfb37", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e2ab5146-b416-5ae2-b8a1-4c6631fa7e7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:269d907c-2b19-575a-bf33-43c8d2127d3a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b1c9846a-5c3f-5fd0-be51-21a7dc38f817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f65b2180-2940-5339-b3f3-c62379c06ead", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c067d316-6c66-5fae-91f3-8d1ffc3ab06c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c556fec9-eb24-5e76-85b8-1a85cd41f92d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d5cc6abd-aa07-5c5c-afd1-bcd6fd0df52f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b37dbccf-125d-5440-87ad-7a39c5bc6422", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:db5d02a0-4a51-5139-b4a5-f88abb769fd5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7249493c-560c-556d-bb70-de1a2a10d1c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e2900490-f32a-5a74-85bf-95a44751a2d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1b7fa77e-651e-55d8-a473-aed66363b763", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:45f3fed0-5bb5-5b24-a040-48ac894471aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:075eff55-5353-5b13-a6c7-ad6593209183", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4358de0d-9114-5db6-9b93-b2923f6ecf2c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bdb145c4-d7ab-5e97-89da-0916647998a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e6b94a01-f6a2-5d9c-9674-219a7c137d0f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring@5.2.8.RELEASE-tuxcare.1" } ] }