{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:04d54a5f-b657-5e14-8add-929ce2fd07e9", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-oxm", "purl": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6", "version": "5.2.0.RELEASE-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b3c65b80-b143-5df8-80b0-8cea1c39c33b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5397", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:9dfc5d11-ba44-58ca-bb5e-eb63dfc9e376", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5397 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:cb4e22fd-3dc1-5998-850f-6c22769e4f85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:4d467c05-c1af-5e6d-9524-c1ff5878adc8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:60af3df1-1b03-52be-bcf7-eaa82c0cf7e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:7b40cedd-d8df-50d5-8361-0f3273d97817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:21ef3c2a-8131-5d5d-a964-0fe57a58e8e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:27ba41c8-2b88-512a-8fee-cb5bbfce73e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:4c524f90-75b0-5dd6-ae9f-c653bc713442", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:122faabe-63d5-583e-8f0e-d496c81143ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:9888fdf0-6497-5073-b713-aa24b7fc1c6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b94c1e46-778b-56f8-8278-c4b698550112", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:d1d7d5f6-40ac-5d04-9320-b28e6eb89478", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:489fc46a-9fbe-504b-80db-cafcb283a8c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6adab68f-eb8a-5273-8591-82ee1ec72995", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:f3762eb8-748e-57e6-9c69-d0373c7a8ba6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2a69d7ec-7251-5acc-95d8-571259da9b7b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:dbe98664-a81e-50d5-a453-f00d1b04cccd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:8ba253b6-e6ce-53f1-a03f-81e16809167f", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-oxm 5.2.0.RELEASE-tuxcare.6." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3f7a0a43-3bf9-5f5a-bbce-7357f829d5e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:f18f53f7-d7c0-597f-8eb4-10d75efbdff2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:731a7276-1748-5b34-800c-98fbe7022677", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:f912b83d-e334-58c5-a46e-125cf566d515", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:03f002d7-f638-5815-b402-869201795119", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:87e09a6f-1aa7-5798-bbe8-0fed5133e42e", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41249 is a false positive for org.springframework:spring-oxm 5.2.0.RELEASE-tuxcare.6." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:4a15f07f-f41c-552c-9cc2-67be3d7e9458", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:117f17f7-cccb-560a-bdf9-911b9debe88e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:85af327c-8e9e-5d68-9efa-f2f329dd33c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:bd693022-99bf-56c8-b438-b52f66375551", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6a99526c-8cf6-51e2-b4f2-75f131a8fd64", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b5a2d95b-6244-52d8-8c42-ae190bcf4568", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:02dc1435-5d8a-5b5e-affa-5b2638c59dee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:5ded7fa9-efa6-55a3-b697-0b031e22592b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:d8d805d3-90c1-57a8-95de-fd1a0c2ee815", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:89703dd7-1f16-5f22-86a3-b8b565230564", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:27bc1531-f054-59d7-8422-311946f66311", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:928e8132-2a12-5963-80c5-80fda9b9a441", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:10196e18-c8f3-59ce-8e89-49e6bed3a388", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:7bc72d7d-69ec-53ab-9d92-3bc75b8b9856", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:8ab8a597-08ca-536f-ad17-b69e6b74a130", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:96fae4f1-2110-5959-84b0-82434efffa06", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a8d22738-e1d8-5650-aaa5-a0b2906333b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c7347350-5b2f-5aed-aff5-0763a9d4e35c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:f2c90251-656a-5cfa-9295-a30690925846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b3875057-0a22-58b8-acb9-a6bd50d3ecd2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:fdb018e3-eac2-5ae9-aa7f-ab821a798c04", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2786e2b8-5f27-5f15-815c-247e70809590", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm. not_affected \u2014 Target version 5.2.0 uses a fundamentally different multipart parsing architecture than the vulnerable code introduced in Spring Framework 5.3.0. The CVE-2026-41853 vulnerability affects the new native Spring multipart parser (MultipartParser and DefaultPartHttpMessageReader) introduced in version 5.3.0, which does not exist in version 5.2.0.", "justification": "code_not_present" } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2ed7ff6c-9dd1-5c8c-b0cf-bb1efc57c17d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a62dfeb5-a876-50f0-b61f-44efca812d25", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ad86a4ed-cec9-5152-a966-8967b7657338", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:1295326d-5110-5352-91d0-1d75203dfd57", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:cb216373-c926-56c8-826f-54d1db99df5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:4f0a5ed5-fc99-5364-9d06-ed60c0c90166", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:9fb6e675-2d9b-53f6-8978-767e3c7bc33b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:751d1ec4-6185-5264-a65c-9d9bc36e3909", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:dc979d8e-644e-5103-878e-e9ec7d2e9169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:5354770c-3f77-5d12-a700-07d37d10d202", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:f34193ac-acc1-5175-b6e9-9870447ab592", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:303f03a5-e25e-5dfb-87e4-ea1320bdaf3d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:d3c0b5b0-df1e-57b1-89a8-ccc55332d4de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-oxm." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.0.RELEASE-tuxcare.6" } ] }