{ "@id": "urn:uuid:14986469-085a-4f52-a1c4-ee37fcadd19c", "role": "Document Creator", "author": "https://tuxcare.com", "version": 1, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-09-24T09:31:26.931840+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2016-1000027 affects version 5.3.37-tuxcare.12 of org.springframework:spring-expression and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "vulnerability": { "name": "CVE-2016-1000027" }, "action_statement": "Vulnerability CVE-2016-1000027 affects version 5.3.37-tuxcare.12 of org.springframework:spring-expression and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required" }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-38808 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2024-38808" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-38809 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2024-38809" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-38816 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2024-38816" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-38819 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2024-38819" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-38820 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2024-38820" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-38828 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2024-38828" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-22233 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2025-22233" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-41242 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2025-41242" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-41249 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2025-41249" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-41254 affects version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2025-41254" }, "action_statement": "Vulnerability CVE-2025-41254 affects version 5.3.37-tuxcare.12 of org.springframework:spring-expression." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-22735 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-22735" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-22737 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-22737" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-22740 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-22740" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-22741 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-22741" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-22745 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-22745" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41838 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-41838" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41839 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-41839" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41840 does not affect version 5.3.37-tuxcare.12 of org.springframework:spring-expression. already_fixed \u2014 The target repository (Spring Framework 5.3.37-tuxcare.6) already contains both fixes for CVE-2026-41840. The fixes were backported on June 8, 2026 via commit 648b33d0a3 as part of CVE-2026-22740 remediation, which addresses the same multipart memory leak vulnerability.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-41840" }, "impact_statement": "already_fixed \u2014 The target repository (Spring Framework 5.3.37-tuxcare.6) already contains both fixes for CVE-2026-41840. The fixes were backported on June 8, 2026 via commit 648b33d0a3 as part of CVE-2026-22740 remediation, which addresses the same multipart memory leak vulnerability." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41841 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-41841" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41842 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-41842" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41843 affects version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-41843" }, "action_statement": "Vulnerability CVE-2026-41843 affects version 5.3.37-tuxcare.12 of org.springframework:spring-expression." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41844 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-41844" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41845 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-41845" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41846 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-41846" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41847 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-41847" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41848 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-41848" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41849 does not affect version 5.3.37-tuxcare.12 of org.springframework:spring-expression. Already patched: all patch commits for CVE-2026-41849 already present in target branch (momus prerequisite AllPatchCommitsAlreadyInTarget).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-41849" }, "impact_statement": "Already patched: all patch commits for CVE-2026-41849 already present in target branch (momus prerequisite AllPatchCommitsAlreadyInTarget)." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41850 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-41850" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41851 affects version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-41851" }, "action_statement": "Vulnerability CVE-2026-41851 affects version 5.3.37-tuxcare.12 of org.springframework:spring-expression." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41852 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-41852" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41853 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-41853" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41854 does not affect version 5.3.37-tuxcare.12 of org.springframework:spring-expression. not_affected \u2014 Spring Framework 5.3.37 is NOT affected by CVE-2026-41854. The vulnerability exists in RfcUriParser (introduced in versions 6.2.x and 7.0.x) which incorrectly accepts malformed IPv6 URIs like `https://[::1]resource`. Version 5.3.37 uses regex-based parsing that correctly identifies the host component, preventing the SSRF outcome even when accepting the malformed format. The architectural differ...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-41854" }, "impact_statement": "not_affected \u2014 Spring Framework 5.3.37 is NOT affected by CVE-2026-41854. The vulnerability exists in RfcUriParser (introduced in versions 6.2.x and 7.0.x) which incorrectly accepts malformed IPv6 URIs like `https://[::1]resource`. Version 5.3.37 uses regex-based parsing that correctly identifies the host component, preventing the SSRF outcome even when accepting the malformed format. The architectural differ..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41855 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-41855" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47884 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-47884" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47886 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-47886" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47887 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-47887" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47888 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-47888" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47891 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-47891" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47892 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-47892" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47893 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-47893" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59280 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-59280" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59281 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-59281" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59282 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-59282" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59283 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-59283" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59313 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-59313" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12", "identifiers": { "purl": "pkg:maven/org.springframework/spring-expression@5.3.37-tuxcare.12" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59314 is fixed in version 5.3.37-tuxcare.12 of org.springframework:spring-expression.", "vulnerability": { "name": "CVE-2026-59314" } } ] }