{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:72f150d7-5485-5b6b-a5c5-001836a236f1", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring", "purl": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2", "version": "5.2.7.RELEASE-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:25e99a58-9c47-5a24-9b95-e5448cdb2142", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e9589a62-1e22-5fbe-ac3d-6d0950589f3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:50efc2ad-b274-540a-8ca5-def4b862954e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d95a1637-c8e7-575c-b7cc-a1eb1131b72a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:3e1a485c-906e-5787-bf9f-9067ef8987e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1323cd1d-2fcc-5c26-b3ce-d9b6edbacefc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:104413bb-8f7e-5222-8b6c-ce2b88f8bd21", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:38b61b4b-563f-575f-9bb3-53380e282552", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6c33c0c3-fba1-5eef-901f-0391c5f45294", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b32a7af2-033e-5593-a7ad-ac924433734f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fef70e62-586e-553d-8924-4081eea03bb2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7c2213d1-d56c-5738-ad6a-887e40b184f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:cf5b5368-6350-5fa4-86e0-5309bbacb8f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:dcc3a2c3-7507-5478-864e-302c3824f07f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:71eeba74-9841-55c8-b1b9-8c1bfa04d2e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8d9d7e46-ca75-553a-a141-7442b5c8648e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:0bf81922-e1dc-5305-bf18-6a47f5e5521b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c51e6995-a593-519a-8dfd-e4b32b28899f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:9c9ba46d-6be4-532e-b114-2dc214715f03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b999ae61-d4f2-5a1d-b13e-ec80b478c76a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring. not_affected \u2014 Spring Framework 5.2.7.RELEASE is not affected by CVE-2024-38820. This CVE addresses a locale-dependent toLowerCase() issue introduced by the CVE-2022-22968 fix. The target version predates the CVE-2022-22968 fix and does not contain the vulnerable code pattern (toLowerCase() without Locale.ROOT in disallowedFields matching). The target uses case-sensitive field matching without any toLowerCase...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:23ab8d96-5d4c-5996-9078-020b4c3fe283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6dc36ac2-fb8f-5c48-8ae8-191e0f6bcf1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4f4702d3-0f37-52ab-b4bb-a3225c648fec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b4ce3f12-4ee8-5f6a-be28-8e1c6f1d9579", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c00d3e02-0171-52d4-a505-9380d496bc47", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:85bbe541-8d2c-58e2-a590-c175bb50bd8c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:deca9082-ecb9-5e37-9c57-c58e860b5a4e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:478c9aad-15cc-53ba-86fb-b1f1399cb464", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a653d521-3a4d-5d51-8b74-016eb9c3ca35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:07225fb2-22d6-519b-9a26-b1624820c7c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8857f9d5-fa06-54ab-999b-481bf51181e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:abe8cb1c-acf1-568b-8cff-6cbd760d11e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7e930b40-beba-556c-9bad-2c770300fa99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:34239885-06d7-591d-af76-b5cf3c82925c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2f4ae3e4-21a0-5c51-a7f6-ae80b21029bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1aea69be-435b-5dbb-808b-fa7fde0dff8d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fce4128c-8146-51ac-8d32-a558f3a95cf5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5d2b5bd5-6d14-5d52-bd23-1c948e3a5087", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:390a624e-d4f3-547a-a3d9-7f4aeec50757", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f08280bd-0af4-57a7-9610-317a748387c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fea08015-257f-5780-ab9d-779dca9b061e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8975c57e-7bea-5a70-8b01-b9e985671d21", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4f0c4b46-8614-504b-b1f2-f35b186194a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:01c4b9e5-7af5-5eff-894b-6d4ffe5228b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fa5224de-2d20-5168-b593-b4c9e9bb20b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:829e4362-0ef2-5dae-a9ad-440d68176eb6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7ebbc2b8-21c1-5e4b-ab75-b631c33dfa59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f9eb2c73-161f-537e-be8f-69716c9670af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:3e5c9f03-8021-5826-b649-7914a07e9ef1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f4257ea8-7c9a-5dcb-96f2-2b59e2a16100", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:19dabef6-aba3-50e8-b6a3-2b3213f88a37", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:46f0867e-a1bc-5229-9158-09111bb52343", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2c5224d7-85f4-56b2-bc4e-8ebb3bdbe29a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f6064d4b-3172-5bb1-9a4f-be82a904f27e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f57a870b-c497-52b2-a88a-76cf5ed297bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7b6b1472-3d57-5877-a8b3-22c1a23303de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fb6586bd-3e62-5300-88d2-0b57c25e8d65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2d0b11da-bc7e-5dd6-82b5-38fae0d1ab2c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e0c14b28-e0ba-510e-a221-8bc6c1a894e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring@5.2.7.RELEASE-tuxcare.2" } ] }