{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6aaa99a1-40fe-58fa-9ed6-8ed8444df549", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring", "purl": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6", "version": "5.2.0.RELEASE-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:4d2f0df3-e761-5391-8cb3-dbde9ad86ae5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5397", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:aaa052a2-c291-5038-9741-612f87de9510", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5397 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3ec3405e-6eae-58f4-adbd-78cca714bce0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:50024276-e78c-5ee0-92bf-1f96e1ceec32", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:33d128cd-10b8-5342-8365-41e9ffa43ff5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3fbd9ce4-4a72-5f93-b01b-b81656e2eb3f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ad964abe-c120-543e-92bf-c66ab1b43ee5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3577103f-8830-58be-991c-6a422af24da5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:fe4fb45a-8dc5-5b63-9188-e9c8eb9437f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:53b5f106-b2ec-5ebe-a85f-cba094bd5f46", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:68c51e86-9097-5189-891b-700f262894fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:91e35357-6c7f-5c64-85d1-fa7d8f477a57", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:165de378-f391-561b-b775-d338828a88a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:230014d3-d4f4-51b2-b0f0-822651e41b78", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6174f6b5-34b9-555a-a63a-6079397e5074", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c588fec9-0908-582a-ab60-87190617332a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2c5a22c9-d7c8-5f1d-a3dd-b92be461f8cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2edfe54a-0943-52d8-a388-1f1253987030", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:30f601a9-8a73-5f06-bb19-61f301d599e2", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring 5.2.0.RELEASE-tuxcare.6." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:5bb5783f-164e-582c-914a-200cb55bf5ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:76adadb0-112a-5115-a231-75d19545a61f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b09d9fc6-1868-5612-a7dd-230ae98fcd2c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:68aa3996-e559-5556-b567-927c3087b695", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2740854b-8e45-57bf-ad7f-a181ac4c95e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:72c03883-1046-5329-a150-da97fb113a1d", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41249 is a false positive for org.springframework:spring 5.2.0.RELEASE-tuxcare.6." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c14925cb-76cd-591a-9220-1ea4b6337c11", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:388876e5-7eab-57ac-8949-2e8766d63314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:1b87ae6c-9325-5556-a260-85ffb48c1740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b080543f-e46f-5bf5-b9f8-811b7a6fbd8e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e76d9af6-bfda-5175-bd0e-3296ffaaf9a8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:d58dba09-1966-5d8a-9b3f-c46aa037d645", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:aeaa65d7-5d72-5175-a38b-2659d771a0e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:d2109a2e-531d-5d92-bb08-ca245cec1af5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c407047c-4665-51c6-bfaf-66081a5f59e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6978f498-562f-5c93-8440-cd8807adb7f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:cfc25209-e20c-558c-87ea-4c38abf68ce7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:f01adc08-3767-5cb0-ab61-cc58fb6e908c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:4693b45f-ed49-59b7-bc8e-0d4ad7e98c71", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:9bf3c610-f5ce-533b-9c47-fd5b86f1f431", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:f5de3686-94c8-576c-936a-6d896065dba7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c0a9544c-b99c-5460-8f4a-ec03199d3ed6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:afac9146-94fc-57fc-aa9a-3a807f8c8282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:f5893264-987e-54df-b5d9-73417b0dd3b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:174f40d4-44fa-521f-a10c-2353a8190bdd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e1fca79b-82d1-51f3-b7f5-93237f3c27e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b6e57f2d-ef88-5775-ac39-4118711ae035", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ba4c4bac-3b2d-5844-9b35-d8d8844450b8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring. not_affected \u2014 Target version 5.2.0 uses a fundamentally different multipart parsing architecture than the vulnerable code introduced in Spring Framework 5.3.0. The CVE-2026-41853 vulnerability affects the new native Spring multipart parser (MultipartParser and DefaultPartHttpMessageReader) introduced in version 5.3.0, which does not exist in version 5.2.0.", "justification": "code_not_present" } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:5f9d5e1d-b7e1-57f0-ba7c-ca2f4e2d28ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:33201475-83fc-52e3-b530-bc86716c0d81", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:5586ba94-a47b-50a7-bf32-7a7eec48a0d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:0b65afe2-facb-531d-97aa-12f14af3bc85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3b74b785-1c7f-5048-9e23-6c4869175189", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:79c92a1b-4cc6-529b-a8ff-22bb9414a41f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e3053d17-a384-5b1f-8824-130cc9d69088", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b990329f-f744-5ab8-9012-f98025754c1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c5b3547a-1f2b-528d-b6b6-90bdc64f4322", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:36c8ca0e-4735-5828-a8be-a8fa7a0fae6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:82febb05-06f1-5a2a-88e0-e34521d45328", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c7e43d30-8289-5b9f-8417-1a80eec3d989", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3d587d42-a4c5-58b6-b114-5b8fdd873164", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring@5.2.0.RELEASE-tuxcare.6" } ] }