{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f45a146f-966e-5ad2-ad9c-22f507fc64af", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-web", "purl": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2", "version": "5.2.7.RELEASE-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:97acdaf2-3d95-5fd3-bfd9-daffec0937e0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b1d381ed-21d0-5684-9915-252a91fd8916", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b98fa209-c987-538b-80b0-7d2eb27e0414", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a7437b8d-b908-592d-832d-81dc0c2d276a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b1f28d2f-7c08-5398-8a02-8b0b87301909", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b0bfa006-059d-5450-9b4b-ee2934f6b994", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d47acc61-0b95-53da-bedd-0fda89cc51ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7336627b-a43e-538d-a17c-3b47044a8be2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ec4fa454-7117-5000-abec-2bfb74b3ee27", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:91849789-2641-5bd4-9d2a-6a18463b2565", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7e929604-b0e3-5591-b94b-70e63f0697b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ded533d2-eec8-5348-b1f9-d152ad5f1689", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fc68d3dc-c44d-5fca-b263-daaa0b09ec45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f651d9e1-eea7-5e6e-a9a3-ebb0f8e329e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a80e0d14-3ba8-5a6e-8f8c-810d7928ddd9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:639740c9-7a4f-5798-abd5-b8a67ebad0b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ed96e0d5-ea60-5006-bce1-291257a1b7ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c09e7683-5cc8-54a7-8cc7-14b612fea4f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:3395b0ba-91c6-5d3e-adc6-dc17fc9a122a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8528079b-8a6c-5d30-8c8a-d0c603e6b027", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web. not_affected \u2014 Spring Framework 5.2.7.RELEASE is not affected by CVE-2024-38820. This CVE addresses a locale-dependent toLowerCase() issue introduced by the CVE-2022-22968 fix. The target version predates the CVE-2022-22968 fix and does not contain the vulnerable code pattern (toLowerCase() without Locale.ROOT in disallowedFields matching). The target uses case-sensitive field matching without any toLowerCase...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:bf0e46b8-baa2-534a-addf-432a6befff30", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8e433a26-b6bb-5038-92a4-77dda88f6c03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f51f7fcf-4b42-57c4-b606-040669646120", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:43f26625-3f96-5b21-b3e7-c1ef839afbfd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6d7c51c4-8dc0-5f6d-8329-df8b82235573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5ae80229-7efc-5c60-8d0f-3c429f6aede3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c624c300-ffe3-517b-a69e-de002e48a38f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b682389d-3394-5213-8025-8012bf8f3b10", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8bc750ca-5c68-50d8-8bf3-6aa475e8fa4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c8c8214d-559b-56a2-aca2-dd7a0ffc79af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a5743af8-36d2-50af-bb92-9209a1481bf5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c697db35-8185-5814-bd91-a5a9d7cc5627", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:af7395d1-427c-5256-a524-9a8288f760e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:99b5ea06-c02d-50eb-84e1-6a1ee9a9d9ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:3124034b-5181-5147-a95a-49edef5ac03a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ec32f3f6-b84e-5b7a-bdaa-7def2071a652", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:041107d9-6e2b-5c8d-a473-8f64791d5b96", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2b556ec0-08b3-574c-ac4b-a9d09b4312ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:293a3e7c-a06e-5339-8843-62d4471b06bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f9b548ce-151c-5793-9bef-bced60714e0b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a573f858-e65d-5fd7-8496-da882c3bb2b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6c1b453c-d668-5c74-8d45-8b7674faca80", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d4859547-77b0-5e31-9b5c-fb0e744b9013", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e58f3753-0827-5fe6-820f-605dee62ff5c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:87feaf35-74d5-53c1-afda-5f274ed3a964", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:573cc3ae-4059-5d7e-bc3f-3888b7d5d892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c4cc9ccb-77a5-5289-aeb5-c75d3b1a2615", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:44714ca1-dd34-54d9-ac20-2ff3e382c55b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6a4467e0-cafb-5479-ac1e-31156a72b08d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f9e686e9-fd52-5670-9d04-9ccd6945053c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:84d77914-ea04-5b87-b03e-4faf963232c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:17611806-ac61-5944-824b-daae8e77c608", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2f913a5c-ee02-54dd-8b93-460f2492d098", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f949fb66-3aba-5e0b-a8a3-1378195aee76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:54f11c47-7fe4-586d-9805-10f2805d96a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:beb262ed-9012-5c1d-80b0-d779223493d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7efb14d2-e402-56c4-8147-9e93d227b6fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f3c6d659-1e6d-5d61-90f1-86b048e3f659", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c8d581cc-5780-5ee4-a0e8-60765d496491", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-web." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.2" } ] }