{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:dd3efb32-64ba-563e-a1a1-847b3b617c96", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-framework-bom", "purl": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1", "version": "5.2.11.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5bf1fc21-fe94-5811-83da-d9ea471759c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a9d58e38-d077-582e-8570-1125fcbe8925", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:24e778f7-3252-50d5-b9d5-085464bbc817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c59545ba-9389-5ab2-af7c-a1ca481bb6b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8eb83258-8cca-553e-b205-3cea445198d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:81f9f8e5-3667-5619-99a6-fc0ea0b2b1c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e72ef0e1-c2c7-5b4e-a05d-6c58ccafe586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a675d2ff-5dbd-5449-8c3f-10fedda0bd15", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a391cd88-194a-513d-87b4-d43477a0f66f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ab7fffa9-1d52-596f-a3bb-21b875f75058", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9f8edcd6-d594-54d3-9b70-bedd7d0df564", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:888894d7-9af5-519b-9b4c-0095c3c54e96", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8b9a93f6-4717-5185-a4a6-9a8c74c79c40", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:293eb13a-69b9-55e4-a10d-0aa4646dfa43", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9b27e3df-a454-59ff-9700-1af1ca26a77d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:84bcd47e-4177-50cc-9caf-4c4212913660", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ee9d7c48-d77b-5da4-8d1e-4fd8a82a5e8c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2d28bf95-6975-500c-8b09-00ce958ef343", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom. not_affected \u2014 Target version 5.2.11.RELEASE does not contain the vulnerable code pattern from CVE-2024-38820. This CVE specifically concerns improper use of .toLowerCase() without Locale.ROOT in DataBinder's disallowedFields handling, which was introduced by the CVE-2022-22968 fix. The target version predates that fix and does not perform any case conversion in setDisallowedFields() or isAllowed() methods. T...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:70c08ca8-375a-543b-9909-2fbbd22a13f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:11ac351a-b09c-532e-9822-6235b0f91042", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f8ef6a2d-fdff-5584-94e1-f31da163fe5c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a45fa09e-c831-5959-a350-c0dd39385015", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:64936ab7-af7e-55a7-8fba-f76a86532125", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5b8376ca-6cdd-58a4-a0f0-b697785549b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f84d03ed-95fd-5014-8eea-fc2a6c5b20e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1a9c641b-d43a-598a-be3f-f9d46f00477e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:045b689c-665c-54bb-b916-9463bc787db4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:356a8ab4-dd5f-5e05-ab8d-2d59906f9d7c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a186f589-172f-5996-81ce-a8785fb1bc02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:574db132-1aaa-5bc9-897a-f497a6b78fc3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:89fb9dc5-f0f0-5390-9540-c4df873bc13e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:50f38db7-dcfa-5e94-a835-5d5998e1dd06", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:459ae570-4a68-53b8-8f3e-6c56546aa632", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b5e441a2-83f7-5f20-8644-543e820a545f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d8417bfe-de39-5195-9879-cec08dcd4d49", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cb156515-523c-5681-955e-d9738a0cda0e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d165d8fb-6273-59ac-8cc2-80c822a5cb6b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ffa4f61e-fcc8-5b1b-bf9f-877d05ecfc9b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:387b26bf-4a07-5797-8a29-798d5c345f54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:244b540a-786c-5d11-875f-8d1a69fc41dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:38d730b7-2e57-50b3-a19c-68502616c462", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dcd3bd48-4b3b-5fc8-8502-f289f63ab010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:acf38f0c-1cd9-54e2-b14c-2b9eb7423888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d1abc5b8-221a-5e96-a892-89d41c21ccd9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7db0dc8c-60b2-5105-9f67-13c5b2ab2c21", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7111c2d8-4006-5f55-ad42-02dba1a70191", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9d192854-57ce-51da-aaf4-c9bf77f6d159", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:659d9138-f4b6-5f98-bd60-1767722d6161", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:70981d4c-8848-5858-8e42-a9b2c2800bb9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e06ada67-d033-555e-82ed-52463e050420", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cfec93b0-a1ae-5f5e-aa9a-9444da3c4020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:14f8c45c-1c25-55f6-8cc0-b55ae510c380", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6d8c787d-ca66-5006-b5bd-4dba0a7d17fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:285a1174-d1be-581f-8c33-67185ada6d40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7350eaa2-6cd2-54e0-94fc-03cc7fee51f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2c3e9734-fdcd-54c5-95bf-dc0be3f849c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b2735333-9bdf-50d7-920c-3fb0cf19af3c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.1" } ] }