{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d0ac91cd-7096-5614-b6e4-a854f4fcb03a", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context-support", "purl": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5", "version": "5.2.0.RELEASE-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e2727970-0c02-512d-b68d-d5b13d345e55", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5397", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c0399318-76e3-5915-95af-7b2015bfb25a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5397 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0c56c857-f026-58de-84e7-b6b312e2348b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d8e42525-f5fc-5e32-a39f-b33bf9a0b9bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6b53d384-223b-5294-a949-ae96cbac4d1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:41be4acb-0d7d-5800-848b-e6d6eb7b430a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6531ba73-6f12-5c59-96bc-059ecbc05d08", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4264ed29-4f30-5b4e-b6e9-b88075d3e014", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5bef5892-f8de-5141-8df6-f177b94774d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1f2f9493-bdb3-5cfd-b986-6ea69a248b0d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5d3b1e1c-244b-5334-a384-b3ed3c3cb744", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:87a5cec2-55c5-5596-b45f-45183f59bd7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f03667c6-b9b5-580e-9500-ea2028c011ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0e05cc70-32d0-5491-a725-82bf08ae5e62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:bfea0c2a-e4c0-56ad-ad58-6dbecbef1228", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c51d14be-e65e-5445-8690-325d26b151df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:10af1289-e011-55d5-b8e8-6d1ff10d5f07", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:41570861-2a16-53bd-83ff-82aecf8d4b50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:63adf2b9-6d1c-53aa-9bc3-816fcf3a2d0b", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-context-support 5.2.0.RELEASE-tuxcare.5." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b47561c2-0a8e-5134-81b2-2721e8a71be0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:40cc1dcd-7b5f-57c2-845d-a8a1eaaee3d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b862a166-61da-51b8-86c8-e9e8a8bf8e71", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d9f9a499-6014-5485-b58e-21be357aa0eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b7b4e9b9-5dff-56fa-8976-d33dd2f9fc4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8a2dd9ac-35f1-5308-bade-415c3ca70473", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41249 is a false positive for org.springframework:spring-context-support 5.2.0.RELEASE-tuxcare.5." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ecc6ce22-0285-574d-9f6f-02aa178e6d13", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b2c19182-5f06-57c0-a391-81410c774aae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:da9c08d2-4f9c-57df-951c-4aa10e552fa6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4d7749de-05eb-5cbb-a80b-c3f57b18dc06", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:99d37b7a-b55b-53c1-96aa-d68ccf9d3160", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:69abf4d9-c6ca-5d8a-abf0-6bf9d2f80570", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9c3adce7-570b-5e50-b7b4-12e9088c9217", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:818878eb-3bd5-5d99-bd9a-a4967da2ad1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0dc9552a-a53b-52f3-b6fc-3b5c626ab5a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:dbf215e3-7120-5886-98e1-deea663873f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d3a79610-d5fc-5439-8ce4-4e909941913d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:229c54fd-7e5c-5d4b-ad31-bef72bd0fe8e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:341262e6-3d1f-5b77-b6f7-e53fb4494a7c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7fcb7a88-2f8d-5dc6-ab35-0488d97eb791", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:97fa6faf-1174-5f7c-b095-c770bc587bd0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b120cb84-eca0-5842-b2b6-ef6dc1148fc3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b39566d1-c860-5b05-9e18-8eb64ee3921e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f5860a6a-1be2-5b01-96f3-792d0d8c4d0e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0afeb032-0496-5fba-8506-33a153396317", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:dc7467fe-4b18-5ba3-aa04-8f2fb189a5f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:cf7901f4-8518-5a7b-b157-88eb5a28bfb8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f458e2e5-ce2a-59a1-8c0e-97ca06b00817", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support. not_affected \u2014 Target version 5.2.0 uses a fundamentally different multipart parsing architecture than the vulnerable code introduced in Spring Framework 5.3.0. The CVE-2026-41853 vulnerability affects the new native Spring multipart parser (MultipartParser and DefaultPartHttpMessageReader) introduced in version 5.3.0, which does not exist in version 5.2.0.", "justification": "code_not_present" } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b6a59f50-01f4-5b9b-9cb6-f76c8a37c0b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ee364505-b9e4-556f-8d60-09f5484e2263", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8b27ebb4-84b1-5925-9a1f-275d912e4084", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ee47bd02-ba1d-5d3c-a454-fb3490ff7982", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:262044be-944c-5098-b830-33665ef87cd4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7ba84b67-30db-5eb1-9d72-85895a27c41a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:39017180-ac38-53e2-ad9e-1b6d77f404d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:37d43df3-2521-5069-a157-44474c9caedf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9b7f7e84-739f-525e-90e8-ae694ca8d0a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7f1054a8-3f79-5c98-b1a0-d2ad6821f2d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f7074b14-ef6c-5df0-b95b-675422ae3fee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3e9b080b-ddc5-566b-b6c7-e8b4014e6a20", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9926aac6-d86a-5c03-afe0-6cf31ab04ebc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ] }