{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ac6b7142-38d4-535a-a9ce-eb7675e93e9a", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-expression", "purl": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5", "version": "5.2.0.RELEASE-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6bcbf838-a9f4-5360-9b97-92c48c9243de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5397", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ed4ccd17-eaff-5dfe-b5a4-4b1210bc9550", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5397 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:07fbc876-4c46-5e37-8ca5-00957ef299ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:42e3ddcd-2682-53fa-aa53-a33a73d87707", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:2004fa0a-21bb-5fc0-8689-302fcd2da525", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6f434bb2-ddd0-5b84-97b1-d7312e0bccb2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:db61bec9-43d6-550b-81d4-1282fcf0ab6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:68e541c4-6584-53f7-bad9-bcf22d7bd013", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b4f42370-50a1-5138-b699-12508a2b0193", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4fff9920-8b08-5ef3-a2a5-96e898764ea2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d1615149-2399-5fe8-879b-c24cf08f7d96", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:64c86976-d0ad-5974-8903-0a8dc7431549", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f95fc8a1-0f96-562e-bcba-070fd97930ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:445aea1e-a4ee-5a96-a575-11fc6a1a0f8f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:97c9613f-b339-5787-84b2-ea6f9a15f632", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c9e03aa2-8f9d-58a8-9aca-1f451bc9b52e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ffaf5031-1bd3-5149-8309-bb0fec03fd6d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4d4f42fa-694a-5be5-a449-e6c939c8fb10", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:36ba36ea-0cf3-5889-b1f8-a22562e1cef8", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-expression 5.2.0.RELEASE-tuxcare.5." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4ee18649-74f5-51f0-a7ea-108cc6abd6b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5859d621-62d2-58c9-af6c-c2190681a6c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4a88b2fd-6978-56de-b125-e908fcbddd62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:fac75e7a-b4d3-5f3b-a626-74ef83132b04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f5e22c6c-7f8c-585b-a4c9-e1e9c037f3da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:deb9c73f-ce23-5d50-a7fe-7606728298d0", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41249 is a false positive for org.springframework:spring-expression 5.2.0.RELEASE-tuxcare.5." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:24304c58-d52f-5ea7-8fdd-a23c41f93c29", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:66912222-7b1d-57e2-9a78-bb221707dfe7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7d2cf137-e107-565b-ba62-143807db9641", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:383dda13-b5a4-5fcf-b074-6d167dbecd65", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:bc2d1a41-8956-5a93-8c36-7ad0e4226c48", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a8fe0cbd-7ce7-5cda-96aa-2f533be1c1d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ae78b219-b000-5aa8-b39d-e4c689794408", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:524ecbb6-685b-5a43-a49b-d74ed5b80677", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:653cacce-12d7-5a4d-b411-0a9140f60535", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0d4c2162-3d3c-51ec-b908-a150860da450", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6dff0224-1686-5cca-b33b-b53f9d1581b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c4555c35-0828-5178-9d48-31fc28856590", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:135952a6-2fc1-5ef9-b3b0-2c0aa5c168a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0f0b6f07-d401-5089-936f-14efa0f13af5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c43029a7-1837-5934-8512-e65891641a86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a5e4de13-2a54-5d81-ba61-a90274fcf685", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c2282d22-c591-5008-b782-83883f4d706a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:71016209-82df-5f9e-acd6-3e93563745f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d0c82fb2-b643-5506-b20b-2507d38d0d7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:13572b95-95f5-5f71-9959-d65a127c798f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b083addd-5a52-5653-bfe0-8faff4457d08", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e1b22120-6464-57bb-a5db-323c519a494a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression. not_affected \u2014 Target version 5.2.0 uses a fundamentally different multipart parsing architecture than the vulnerable code introduced in Spring Framework 5.3.0. The CVE-2026-41853 vulnerability affects the new native Spring multipart parser (MultipartParser and DefaultPartHttpMessageReader) introduced in version 5.3.0, which does not exist in version 5.2.0.", "justification": "code_not_present" } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e66e0a75-acaf-59e6-b6da-d8a0ad6f3d8f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b16ee2ce-23fb-55d2-a4fa-ea42b466417f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e95b7ed0-9de8-5998-ba0e-2afc44017343", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8a1dad3c-58b7-5a19-9087-5e038a4cd453", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:44eb3dfb-e20f-561e-b7c2-2536f523ac0f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:72b13af3-fbb0-5afc-930b-4f3015fb54b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9e8a63e6-31e3-5214-bbd1-f2b6d18efa6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7cad29cc-6198-59d2-ae6c-ca15367a89d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:580e1780-4f9a-5d79-8ec4-9a9b333a279f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:632f2797-c254-5d70-ba4a-3a2e682a2019", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0ade7aa2-cc7c-5122-ad9f-235f425f7fa4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f64cda78-f617-5d7f-aa3e-8d1afe03e830", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6bc3fe86-75d8-505f-9bd9-bf67ba67db1d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-expression." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.2.0.RELEASE-tuxcare.5" } ] }