{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:37912d60-73e6-5280-8339-5e46f32f39ad", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context", "purl": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1", "version": "5.2.11.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e020b7f3-2c2c-5220-8bdc-b695c7c53c9b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:30d656e4-0e1b-50c0-b790-67457684f496", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:86016425-8600-58ef-b38c-f5cdd544a007", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c7bfe7d9-5e0b-5011-96df-09a197c26f91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d44684af-a493-54d2-9e1e-3fefdb4ff42e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:17d51053-1ddc-54ce-905f-9a783941b45a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cc32176d-9c54-5a78-a924-9ad4f11949c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ca794faa-7bde-5059-8312-7c20bace98bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:affbff88-997d-59d5-8a01-23db77532d11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dd6c15d3-41ab-50fc-8eab-c265121becff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a572ce96-b7d6-509d-9109-05821e7de894", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1181e8cc-f44a-53b6-93ca-e95bf51b04fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2056cce9-11a4-5c40-a311-6aab514e466e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8cc113a5-ed78-59a8-93e6-d119a7046810", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c3ea51f1-1db6-528a-a327-27128224a07f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:95c75daa-641d-510d-bf4b-0a036e4fbae3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a1840baa-f8ee-562d-bf02-13aeb229e6ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:13547a2b-6811-543f-b11c-d82dbc07bc66", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context. not_affected \u2014 Target version 5.2.11.RELEASE does not contain the vulnerable code pattern from CVE-2024-38820. This CVE specifically concerns improper use of .toLowerCase() without Locale.ROOT in DataBinder's disallowedFields handling, which was introduced by the CVE-2022-22968 fix. The target version predates that fix and does not perform any case conversion in setDisallowedFields() or isAllowed() methods. T...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1cf8d7d8-94a8-5f49-8c85-078e241a31b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4181ab26-7ee3-5eba-b096-1c9998829960", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cd8ee67a-452c-5d0e-8584-509a4895426d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b8556acb-cdae-5154-bdf3-9e8676894945", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f2146d6e-a1de-56d8-a207-eb83a758f74d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a4641ff5-c330-5e4b-b0c7-aa057a3a1e6c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6bf33d7d-d876-5e69-8088-1a156cd11ba5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c7e3ae4e-5f43-58f4-b7b1-c8113e44ca39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:807405f6-8f56-5125-94ee-28190fc36f6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c965c58a-5e21-542f-a5ab-c656de6b93ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:35f44ac6-2026-55c0-b456-199c637463bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:23d1351f-1fef-5ac0-ba48-b102c4341e17", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:54bad286-24ed-5751-a60b-02b0d66d5546", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c82ddd62-6545-5275-84d4-ce739e61f5f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7bea507c-484b-5f7b-94b4-a090f48d8368", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f76e0d2d-73ab-596d-a98b-1d9408a53b14", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d3268ff8-2009-52db-8927-0daa617fe618", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5b72a2d4-68b2-58b5-8296-7a51a3610d4c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4d5b4c16-6163-5527-9b38-467df7b1e53c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c2b69265-406a-5441-b36c-3c3d4dbc4cb3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7ce64f53-ac1d-592d-bdb4-d4ac9df1bb32", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4687ed10-09d7-584a-9a74-4137c6753209", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b5be8b2e-2cef-5c54-b641-880b24a0b9cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6f68cdd4-45c4-5dab-9845-f908e2ab79f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b4e3b96e-8e80-5246-9b8e-c3d098dbbea2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f86b118e-aaa0-5d05-a95c-e1c8aa7f456e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:be79cf48-e7b0-5f86-8675-2bc118e2e537", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0ec505ff-2086-5d9c-8884-30514add6f6f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d3bd6f6d-7f37-5084-89ce-5992f15426bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7abdadfc-a38d-5f64-b1f3-89e933c534a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f7bf3e66-cdb2-593e-80f8-3e5f60b3cb80", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e9b00f10-49d4-5fd1-9043-2200142f7606", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e7a1ff74-9ede-518f-994f-89c02c103d45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1a4e3802-4ac6-5bd6-bb68-c3db74e97006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f6fc76e5-2040-5788-8e60-d136c3692260", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:39e4b044-2ae7-53d4-a81d-ad2f31757fc6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:56d6ce51-daa5-5d26-bf93-3d8a49c7aeda", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f95559d0-2f1e-5c10-b710-474844420a4a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:84c367b6-7b33-5360-9c9b-9662e04c9cc0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-context." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.11.RELEASE-tuxcare.1" } ] }