{ "@id": "urn:uuid:2c939e1a-3de5-45b6-b5dc-acc1bbcf595b", "role": "Document Creator", "author": "https://tuxcare.com", "version": 1, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-09-24T09:31:26.931840+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2016-1000027 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "vulnerability": { "name": "CVE-2016-1000027" }, "action_statement": "Vulnerability CVE-2016-1000027 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required" }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2021-22060 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2021-22060" }, "action_statement": "Vulnerability CVE-2021-22060 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2021-22096 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2021-22096" }, "action_statement": "Vulnerability CVE-2021-22096 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2021-22118 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2021-22118" }, "action_statement": "Vulnerability CVE-2021-22118 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-22950 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2022-22950" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-22965 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2022-22965" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-22968 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2022-22968" }, "action_statement": "Vulnerability CVE-2022-22968 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-22970 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2022-22970" }, "action_statement": "Vulnerability CVE-2022-22970 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-22971 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2022-22971" }, "action_statement": "Vulnerability CVE-2022-22971 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2023-20861 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2023-20861" }, "action_statement": "Vulnerability CVE-2023-20861 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2023-20863 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2023-20863" }, "action_statement": "Vulnerability CVE-2023-20863 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-22243 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2024-22243" }, "action_statement": "Vulnerability CVE-2024-22243 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-22259 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2024-22259" }, "action_statement": "Vulnerability CVE-2024-22259 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-22262 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2024-22262" }, "action_statement": "Vulnerability CVE-2024-22262 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-38808 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2024-38808" }, "action_statement": "Vulnerability CVE-2024-38808 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-38809 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2024-38809" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-38816 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2024-38816" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-38819 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2024-38819" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-38820 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging. not_affected \u2014 Version 5.2.10.RELEASE does not contain the vulnerable code pattern described in CVE-2024-38820. This CVE specifically affects the fix for CVE-2022-22968, which introduced case-insensitive field matching using String.toLowerCase() without a Locale parameter. The target version uses case-sensitive matching and does not call toLowerCase() in its DataBinder field validation logic. Therefore, the l...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2024-38820" }, "impact_statement": "not_affected \u2014 Version 5.2.10.RELEASE does not contain the vulnerable code pattern described in CVE-2024-38820. This CVE specifically affects the fix for CVE-2022-22968, which introduced case-insensitive field matching using String.toLowerCase() without a Locale parameter. The target version uses case-sensitive matching and does not call toLowerCase() in its DataBinder field validation logic. Therefore, the l..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-22233 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2025-22233" }, "action_statement": "Vulnerability CVE-2025-22233 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-41242 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2025-41242" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-41249 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2025-41249" }, "action_statement": "Vulnerability CVE-2025-41249 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-41254 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2025-41254" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-22735 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-22735" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-22737 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-22737" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-22740 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-22740" }, "action_statement": "Vulnerability CVE-2026-22740 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-22741 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-22741" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-22745 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-22745" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41838 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-41838" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41839 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-41839" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41840 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging. not_affected \u2014 Version 5.2.10.RELEASE is not affected by CVE-2026-41840. The vulnerability targets the PartGenerator/MultipartParser multipart parsing implementation introduced in Spring Framework 5.3.0. Version 5.2.10 (released October 2020, before 5.3.0) uses a completely different Synchronoss-based multipart parsing architecture that does not have the vulnerable BodyToken buffering mechanism. The vulnerabl...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-41840" }, "impact_statement": "not_affected \u2014 Version 5.2.10.RELEASE is not affected by CVE-2026-41840. The vulnerability targets the PartGenerator/MultipartParser multipart parsing implementation introduced in Spring Framework 5.3.0. Version 5.2.10 (released October 2020, before 5.3.0) uses a completely different Synchronoss-based multipart parsing architecture that does not have the vulnerable BodyToken buffering mechanism. The vulnerabl..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41841 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-41841" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41842 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-41842" }, "action_statement": "Vulnerability CVE-2026-41842 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41843 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-41843" }, "action_statement": "Vulnerability CVE-2026-41843 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41844 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-41844" }, "action_statement": "Vulnerability CVE-2026-41844 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41845 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-41845" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41846 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-41846" }, "action_statement": "Vulnerability CVE-2026-41846 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41847 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-41847" }, "action_statement": "Vulnerability CVE-2026-41847 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41848 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-41848" }, "action_statement": "Vulnerability CVE-2026-41848 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41849 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-41849" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41850 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-41850" }, "action_statement": "Vulnerability CVE-2026-41850 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41851 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-41851" }, "action_statement": "Vulnerability CVE-2026-41851 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41852 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-41852" }, "action_statement": "Vulnerability CVE-2026-41852 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41853 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-41853" }, "action_statement": "Vulnerability CVE-2026-41853 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41854 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-41854" }, "action_statement": "Vulnerability CVE-2026-41854 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41855 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-41855" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47884 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-47884" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47886 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-47886" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47887 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-47887" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47888 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-47888" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47891 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-47891" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47892 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-47892" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47893 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-47893" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59280 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-59280" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59281 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-59281" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59282 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-59282" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59283 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-59283" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59314 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging.", "vulnerability": { "name": "CVE-2026-59314" } } ] }