{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:aec03388-1640-5fad-bfa4-31198974f0d9", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-beans", "purl": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6", "version": "5.2.0.RELEASE-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:96db46e2-16b1-5b04-b418-a9b444b871e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5397", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c8fb75fc-af03-5011-9cc4-7b2bf75c43fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5397 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:cb2167c8-4642-54d8-a3a2-5f8344e92f8a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:fb161ca9-1480-54a7-b29b-bea6a816b30a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:db30d2de-59da-5c4f-b4c8-8caafe702bc2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:df1c7356-7ae2-5227-941b-507fc9606806", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:4f94cef0-00dd-527d-9fe0-8507fa3270b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:22226dc8-1da8-5e41-bcd4-0644dcac0f8b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a2f75b71-3965-57c1-9de0-f0bb894c4e6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:0bf5d716-5c2b-573b-9ca5-fda8bd58016c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:d013a1ff-af42-5ae1-ab75-d0f1d4ea6f76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b7fa53c3-a47d-5e12-88d2-082f3d2d6bb7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:8dc2720f-c6a7-507b-98be-7f10c194b62f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:78a031ba-eed9-580c-9019-85309bfec13d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a6c31ef9-8d57-5010-9f30-c9c3df5245a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:5ec38655-25a2-5bbe-a282-8f42eb0294ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:9964b2bb-65ca-59a4-9451-d32965fb7573", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c094239d-f43a-502c-8408-54e472a804c3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:4b7e26df-a719-53b5-97c9-37297489481a", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-beans 5.2.0.RELEASE-tuxcare.6." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3550fe31-0f1c-5590-92f9-78be57db7a07", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:5a1de7d4-52ff-5f80-9bab-f38393ba7fe2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:41b8c19c-93d6-5fb5-981f-020e79f68d87", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e9ecee62-e8ab-5a2b-a165-996ac9abe4c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:665c2593-3c7e-5083-b999-9b038515cf03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:83caf080-75dc-590e-ab0a-d98a970b98e8", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41249 is a false positive for org.springframework:spring-beans 5.2.0.RELEASE-tuxcare.6." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:02aedd9f-5824-5eee-86d5-cdc56aa6878d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b8bde0d7-93b3-5014-a42c-df115becff0b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:de3b02ac-964c-5973-82e9-69e406568051", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:025b82bc-8e53-5141-a414-c2dd65a4aa04", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3022b314-da7e-5126-ba73-b67fbb82be41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:86c1eee1-48bb-5ff2-abed-8d19cb438e6c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:5a2c6da2-0e62-5029-8bbb-3f9a65d429ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e64eda18-8239-56de-bbe9-a119295b2a00", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2103be47-16c4-5975-9fd9-0bef5be20b5e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c7949608-260a-5233-a794-e537b5f46e8e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e474d82e-77fe-599e-89e3-42ee84761c7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c43f7e30-8040-54b8-b478-feab695d6407", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:4f929551-ed2f-5d58-bc71-06635de90928", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e014321b-03d2-54eb-b2fa-183103a31759", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2d7398c0-b780-55db-9db4-1f8bbc64fad9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:5e7f7f1d-d7ac-5207-8d84-1930e62d00f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:36fbce98-f196-5e43-8b2a-71bb32d44677", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:59b78e86-0582-53ca-81ec-d37d05b84fbb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:4dfdf53b-3157-56fa-841d-c95edb4db996", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:007bfd6f-0f04-5cd7-a909-c16100a3ae6e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:f3aeac0e-6815-5b0a-b6ab-0b9c558cfe61", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ec86fe66-a9bd-5a2c-96b6-b0044be40ad2", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans. not_affected \u2014 Target version 5.2.0 uses a fundamentally different multipart parsing architecture than the vulnerable code introduced in Spring Framework 5.3.0. The CVE-2026-41853 vulnerability affects the new native Spring multipart parser (MultipartParser and DefaultPartHttpMessageReader) introduced in version 5.3.0, which does not exist in version 5.2.0.", "justification": "code_not_present" } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2ae8e6b5-19fe-515d-9c1b-6a9c9ddb2f8b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6ae1bc2f-e553-599a-900e-b68f8b385aad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:8dd920dc-8de6-54b5-a04d-6479038a2980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:7c08a20b-6b5a-5ba1-bf4e-2de303c747f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3b3b740f-abde-51fc-a6f7-04f8535e05d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b2599e2d-e8a5-577e-ad5c-879a2eac4ea6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:1d4054c4-574d-5b20-ac8a-a8be75ee4f6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:89b8eb97-1d3d-5cad-bc34-f3bf02bb18b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:f92928b2-9f23-5da4-a952-ef6ec9bdf2bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:51b8f442-e4c0-5f66-97bb-8de4d4af3063", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:af62accf-6f20-5698-a010-7e413e2ccb86", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6ed25575-89ba-5f2a-8c84-09f8ac42a1b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:60ffcf35-1ff8-5321-bcd4-15c48bc95a42", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-beans." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.0.RELEASE-tuxcare.6" } ] }