{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ab874131-899d-502b-b0c1-69cca5ab24f0", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-instrument", "purl": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5", "version": "5.2.0.RELEASE-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b92ccade-4138-55da-8abe-fd176804495b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5397", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0167e9bb-ebcf-53d4-96f2-088f703f9491", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5397 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5692200c-dd72-58bd-846e-cfc29a36e9f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ba51e6d5-4013-51ce-b5da-dd0b0ebc37b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:31347915-c613-5c02-a0a4-4b9531f5504a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b2cd296e-6807-54c1-a34c-13125797a93d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b65f8cc4-5f5e-5743-b496-da1e5ba8eb04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:80301893-42b9-5dea-8e62-3f9f13fd7b8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0c59775f-3d44-567a-8e2a-04870909ae55", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:2fc2e8a7-0e66-5fad-a6ef-70fa49c27665", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:fe3ebf71-c704-55b6-8bd2-8166957dad48", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4169c9f2-c962-53e7-8c1c-aad78e2fae98", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:546228d5-5f25-5c45-863e-84bb73d51236", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8850c2cf-3897-5106-a197-81732bb62b87", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:eae3c4f8-378d-532c-821c-48b2d35b010a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:06df3a66-a573-5f60-a2d0-af47bf0c9ab8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f6f10d20-6c53-5c2f-a011-6e88b0fcb431", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0f876861-bea6-5223-8324-09df5f2cae42", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b6b54e62-1130-55a2-afb6-e2361d999550", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-instrument 5.2.0.RELEASE-tuxcare.5." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:55d85937-0d01-5c46-8dff-ab028c7f897a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:875d51cd-27b7-5eef-943e-c0f6eda5d423", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:38fe5ae1-56b1-5b82-8da0-46246ac69f50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8c4ab745-fcb4-5419-8fe7-d60de1981526", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d3859dd2-ba4a-543e-98ca-a4a105a1d4ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:63ffef28-0ad7-510f-8b2a-ccd3c29139ad", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41249 is a false positive for org.springframework:spring-instrument 5.2.0.RELEASE-tuxcare.5." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7b75aff3-9e22-5209-87b3-2991f9b1e9e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:86386b8d-06a1-5167-af17-8ebd9b2e2092", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0abec643-4d43-5841-8ab1-6d55d1548010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:2a63e5ad-3d57-565b-ba93-668b513ad50f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:878bd9b0-2162-595c-a476-666eeae84878", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d75f2459-81c8-522c-9196-2dc8e5a38a41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c5caf79a-8eba-57b2-bf16-2a427a1daa87", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:11798df4-cda4-5644-b5a0-c99bebbcd0e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9a76e392-bf7b-5db2-90f7-e0a05aafa6cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0f7672a6-2b95-51c6-8d81-648cf3ccc42a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:252fcd35-9931-51ed-b485-4add12c283f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7e6ed320-04b0-59c1-a9b4-b901b79e8ef8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6309c5d4-8e8c-5869-8b92-4ae083ad3f56", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d735a02c-6257-5285-aee3-8c5949a0d202", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f405b85c-0b19-5c46-94e9-08de9ed24e7c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4a5db773-9f22-50c2-bdae-d6d1faf88676", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:84206d43-a916-5920-9df1-5ffafa43b059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:79319b43-2e1b-5a26-a6a6-aeb366d8354f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:50839d83-3b2e-581b-a19d-c4dbc47fae6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4b3e893c-a5dc-5a0d-a4de-7e8b3884be12", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:891d7b26-01fe-5bb5-9a57-fd54da16834e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:eda732b7-d736-54bb-83c5-984baaf277fb", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument. not_affected \u2014 Target version 5.2.0 uses a fundamentally different multipart parsing architecture than the vulnerable code introduced in Spring Framework 5.3.0. The CVE-2026-41853 vulnerability affects the new native Spring multipart parser (MultipartParser and DefaultPartHttpMessageReader) introduced in version 5.3.0, which does not exist in version 5.2.0.", "justification": "code_not_present" } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:74837097-4d74-5bde-83b5-2eac3569a065", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:54a97504-a2ee-5ab2-a57c-ce5bb47e91e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3ba72103-a860-5ebc-bff7-7854f10326c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b366f643-8fb7-5f4d-93c7-75dbbbda0dfc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6cb524ec-b697-5641-823b-6b12677cd18e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:583bd09c-a2a5-5d1a-8fec-10e0164c26a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6ae989dc-389b-5e50-8069-b1e34807b289", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:85b95f15-07df-5364-bbac-5af7a902f6f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:86d77a28-c66a-5ccd-8467-944e15fec907", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0e873850-5c32-53a1-ba7c-bafc0761448f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7f5b3b68-ac65-56b5-90b6-e2c4f8e8da9a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3dcd93cf-57d1-5c59-94ca-232b1fca1855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:28428e03-9053-5c85-857d-4e728c18172a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.2.0.RELEASE-tuxcare.5" } ] }