{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e634c26e-b86f-555e-86bf-1cc2dd13fd93", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jdbc", "purl": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6", "version": "5.2.0.RELEASE-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:7f264c4d-a18a-5439-8ffd-bcbb79013469", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5397", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:23f30910-f1ec-59b1-94a6-cdb84ffc6103", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5397 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b05c8aec-f646-5348-adc7-460758c76709", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:12e8b73f-e917-5311-af62-5fcf94669605", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:0a328f82-d223-5947-b8ce-89d5b7b727de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2ea2d1f8-3f0c-5d74-929e-5a25b94cfbcb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:fa941b9d-2c85-5a34-8d82-77fad822816d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:0202433e-7af9-5082-8a10-f518433d06d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:116a4aec-2987-505a-874b-5f469d2e4eac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:04d60c2e-2582-59ec-9c42-0abf90c3ad6a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:97072e61-4dd8-54e3-99f9-f385d98ae5e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3ff7a877-5b7d-5554-b3fd-1a968d4c6140", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:bcc25ce5-47a4-5832-81df-d4c047670627", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:f4fd5cf3-0738-5686-9006-8917cd2b0b21", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b40d9360-9e75-592f-adce-d2801425be6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:5f349cc3-2a0e-5430-96fa-43a5be4c45da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:1a51a092-daa1-53bf-b3f9-8f5a064cb908", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:87a5d2a8-2c5c-5ab9-ad6a-7d4b65842fa6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:74a99c21-3e26-549c-9e66-f43e14d29fc2", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-jdbc 5.2.0.RELEASE-tuxcare.6." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:14c4c256-43f3-549d-8392-35a046ef033f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ccd22972-9ee0-5310-b8ff-c298e8300c7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:0e60b44d-f82c-5701-b247-ec79cb3cb2dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b0767a53-9be9-50f2-a327-8a35c805c27a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:66160e9e-d47f-5380-8bed-04b7a6b1821c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ffc1440a-d2b6-552c-9016-9bb2e84f7b86", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41249 is a false positive for org.springframework:spring-jdbc 5.2.0.RELEASE-tuxcare.6." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a1895266-89c6-552b-8928-e5f2adbd0817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:31cbbb01-2a3f-5cf4-871d-a84ab5ed1b4d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:edf579b4-6bae-566e-a92e-1112ab4b1213", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ec90bcae-6579-53bb-b3ef-6a36683f11b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:845ca56c-7241-5302-bc58-82792e2d0667", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b980aadf-a9e3-5302-a8da-b8ec3b456f96", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:d1313d94-a1dc-50c9-bd7e-1f7a9c5922f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:fd4b860b-f16f-5522-8863-39d602ae6b6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6dc560fd-1e0c-5fd1-b2b8-7e50a85d0060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ab70342b-dd91-5734-8c05-77c1f82699f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:57253b61-0c5a-55ef-8192-17f21044009c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:1dd2ee79-8356-5342-bfb4-e02af5c1a655", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b50d2a1c-fbbb-5e2a-b1ce-2e22ae15706f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c55d218e-d308-56d1-98ba-de18fe10de38", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:5b31d039-9809-5835-a68f-d6912744c12c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:aa5ec385-e2d3-5a85-9f2d-ad72173c55c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:15fb007f-208b-5fe1-b681-3e8d5fba8e05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:37cf2b86-723c-5f99-bf58-a81d531b43c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ef71d26f-3b3c-5c77-8bd1-818145a133ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:d793e750-001d-5545-a922-ee955f04db26", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c978384f-7ebb-58d7-9903-059e03fff4d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:79974c63-330d-5f37-8915-1f0ff3036725", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc. not_affected \u2014 Target version 5.2.0 uses a fundamentally different multipart parsing architecture than the vulnerable code introduced in Spring Framework 5.3.0. The CVE-2026-41853 vulnerability affects the new native Spring multipart parser (MultipartParser and DefaultPartHttpMessageReader) introduced in version 5.3.0, which does not exist in version 5.2.0.", "justification": "code_not_present" } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ced8714b-97f3-5485-a646-ed195d38e5c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b871edfd-1569-5f96-ae18-e4a924f436b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:63b53859-4d9c-5aff-9785-861309c2edf3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:cf78c2f5-1a2e-5420-a457-7220d35a2986", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:1b3473de-67fa-5584-a6db-3588a47298b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:643862d1-f7b4-5f5a-9b58-07d964c018a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:85af7c7d-083b-53af-b105-efcaa5c23f8a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ada6746d-672c-5818-83c1-cffbc984bc33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:62b25599-aa29-50f5-962a-a9f41216f4c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:74ba244b-2f4a-5d7d-a116-81cf23a5fceb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ae263e56-d7da-58e4-8e76-93073532b964", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3e6ac0ea-91e2-597c-bc7b-255590f60a8d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a179ef91-2f12-5593-b417-14482662baee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.2.0.RELEASE-tuxcare.6" } ] }