{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:46b42971-b83b-583e-bc15-a7ff44b251d9", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-beans", "purl": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1", "version": "5.2.11.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d3dc1db6-5e82-592d-91ff-dd90373a39cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4fbf6e4b-a7df-5950-84b5-dd7a95677b0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:55780276-6da8-5d6a-ac2f-bf30acdeec10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ac587cb3-99f2-5e17-b411-8cdc9ecc1e9f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:41d2c723-1b37-58e4-b8a2-94fdf9f76579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ce667cc5-bbb9-59f5-89b7-2b0c9f952400", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:91924841-5028-5c81-bb41-fbaf1b496d31", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7e902cca-2bd8-53a3-a922-a2755167ac3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6a3d8056-1afa-5330-bc61-af7876ab84a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:007d60a0-7f14-5bc9-9613-2df9b1a06249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:23b6c8c2-3ffb-5e4a-a0ea-34adcad0e0fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0144d844-255e-504b-ac92-3339a6349a26", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7d6af08c-63ee-50ef-b474-2dd29f48b7f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a7e3c1f1-63c2-5950-a7af-e6a76dbf51a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5824ed2b-9607-5816-ae65-448f27b84513", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3e3b9fa8-7b67-5727-bb54-5c7dd89fb467", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dc619a50-bdfd-5900-aaee-229bc9b154f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6161950b-6404-5d0b-8060-c6c4b039f975", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans. not_affected \u2014 Target version 5.2.11.RELEASE does not contain the vulnerable code pattern from CVE-2024-38820. This CVE specifically concerns improper use of .toLowerCase() without Locale.ROOT in DataBinder's disallowedFields handling, which was introduced by the CVE-2022-22968 fix. The target version predates that fix and does not perform any case conversion in setDisallowedFields() or isAllowed() methods. T...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:39c5697c-d077-5c22-9fa6-9e406170b749", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:edc0a3eb-84ba-5bf6-81ed-6e685d300d00", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c9509abe-ce9c-5a7b-ae09-03821c050cf4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:96524847-aaf5-581d-afa3-f7a3aaca3a49", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6ebac931-2401-5937-ac23-c0260b9caf98", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b4710135-a1fa-5cc7-975e-11899110a2f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:98ff0e7b-ecaf-5541-b124-e0e8c26953de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:84d91945-37a2-578c-b4d9-a0f075b8ae13", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4ee353e7-def6-5f65-a9e6-1d5baa07ad3c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:880cb397-4c67-5144-9789-c084818c0fe1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:88d00b68-4983-5bb8-abb9-9382e15921a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:68a6b4ac-74b7-5696-acc8-0de713dbaa00", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a85e015a-9da7-517e-b935-9a57452a95a8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e39f14b3-e79d-527f-b692-ce8ab5a807e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8c60282d-4025-5da3-b43b-2f32d0de95d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:288a558b-01d5-5167-8a43-6cc0b89cd5a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d78e5204-f71a-5029-8f90-ccb74e9b7ae5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ca72fa54-1f48-5736-921b-bf9870d466f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:225ee67c-3737-5b9b-9bce-51c50bc4d475", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7d879e03-0f04-58c9-9d14-a73d78c46092", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b9b8db21-ba48-5fc3-bca8-45a2961d6184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b01347ff-e4a2-5333-a1e5-71b4445faa4f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dd0c7ee8-26b1-521d-b6dd-c90e29e936e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1450b71d-c8f1-53c6-afc6-51ee1c6fa68d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a78fd1a7-c319-5d19-8a25-ac02770a12f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d4561e61-b942-5a5f-a1a4-4f851fd5ae65", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:159b7d4e-17ac-5e8e-a487-a43505dcd410", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ef2feb88-2d37-5d8a-be79-10708d357337", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b4aaf164-409a-5620-99ec-79bec2f5e057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4bcb22db-4ff8-5f2b-a6e2-46cc1cdc43e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:80691c28-8876-55c4-8a11-e215946937ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:de3317d4-6b4f-5635-b05e-54bbab911b3a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:be989b75-a450-5a14-ae02-4567fe3ae8ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f275db58-9ca2-58f2-b49c-400a9263eac1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1549084e-03b2-5a71-a2c7-f9c1f9e0f6c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7337d61d-7eab-542b-935e-c70b6c0df669", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:74498ce7-b508-579f-b8d0-a53f9b25cfe8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:77d1d01a-7c6d-506f-bb91-2fd672334fe6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c0fe2f5f-5965-514b-b81b-10689ce26106", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-beans." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.1" } ] }