{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0704e6fa-784f-5ad2-9a68-afd4719ba53d", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jcl", "purl": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1", "version": "5.2.11.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4f000f65-f519-554f-83a5-885e966c6af4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:26fb7fb9-ccda-5093-a38f-cd176ec8a9f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2c886408-fa12-5d0f-81e1-4d5493df7860", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a3210562-2ce6-590b-b146-cf90b3f6de35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:62da8d8c-cee7-5cdd-b2e8-df533b697382", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:56f76b02-e652-54e2-af1e-8159a6467cb5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:df4c3100-d9f9-53bf-85ec-19e46d594966", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1193417f-742c-5fca-9f20-3023189039c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f096105d-aa56-56e1-ae37-430c814364c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d5d8c595-5404-5f04-9b90-ba031023250d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:316c5053-36de-595f-b750-540e5893a376", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:828f39a9-6882-5a22-ac73-2df81c15193d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fa13a4d2-5cd1-57d6-a57e-e8795613b27d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5e8d57f6-4def-570b-89b6-bd5e49c0104b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b23536bd-e5f1-5f39-800f-25d66910edab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3e6049e6-bf17-5640-8b28-9c0c9e200963", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:179fcdf0-4a10-5d25-965e-c4e300ac8cfc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b3a3da79-314c-5efd-857f-3a5b17f6ac90", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl. not_affected \u2014 Target version 5.2.11.RELEASE does not contain the vulnerable code pattern from CVE-2024-38820. This CVE specifically concerns improper use of .toLowerCase() without Locale.ROOT in DataBinder's disallowedFields handling, which was introduced by the CVE-2022-22968 fix. The target version predates that fix and does not perform any case conversion in setDisallowedFields() or isAllowed() methods. T...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2d99ea11-6675-520e-8105-ae816096aaef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:922830fb-b00a-51d4-94bf-86b302a46c31", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:32b5c194-2ef2-57ab-bc2e-a929fceccb4f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2dcb26fa-51aa-58f7-af5a-c30af20b48aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d73e8224-07aa-5f44-ba64-9322dbc128af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:57370735-445e-5075-8966-1e78732bef71", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:aeab4333-7210-57b5-988b-31eb82270673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6c8a48ae-2ddc-5c4a-ba43-eb142d41cea0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:de54d8d2-daed-59dc-88cd-47db290a8bda", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:71e93ea7-9035-5e4f-96b0-be84726ba153", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6a74a3e1-3997-5ece-9f60-321b18ef9d68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4f3d79ba-8ff9-54e2-b976-03b8c9193d6c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6edd6394-f327-5dc0-96ee-b571f76d7105", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:95f07076-7d91-591e-bbf8-fdd3ae8d5cba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e4681051-64ce-5be6-989d-bc358776a114", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:35d6c622-939a-50ff-8659-ec8e3296c63e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c0a82858-716a-5a8a-b31e-35c72074e90d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e55b8e93-80db-55a6-a22d-432b759c78bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:687fc535-da43-56ab-996a-66eb50b30318", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1a9c2a9e-f44a-5a01-8825-dd384280560b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2f90e0f5-8304-5fb7-a096-4b1f5bc20031", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:78935e96-8945-5cc5-9bbe-990760bf4e3c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4cbc0a1d-a790-594e-9231-bb6a240dee9f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:79033a43-7d9a-53fd-83f5-4a83b78bc927", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b2a5823d-1d96-5b97-b3a7-9d31b1d57979", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8768060f-6c85-58ce-a5b6-fa5741033aa1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a393f7a7-19ae-584e-b750-af67269d2523", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0ddd0a71-4f52-5f8c-8b4f-cd59c933ff8f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f0ff57bf-7041-572a-8846-7602a2c5e567", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7e3ee119-afc5-5953-a013-6d1101a463aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4db76fe6-72b8-58c5-be9c-874224c26ca9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c38dd63e-733f-56ca-9a9a-555bf7d142d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cdc1395e-b990-5a48-86d6-143baedea254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:10ec21ed-2bc7-54c7-8409-d652026eb4a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9c7264e4-a43d-5454-9f18-ab55dffb4541", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7217b601-3c36-583e-821c-7a41a0c460c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1baa1d1a-081e-5754-a6ef-a4b53aeec5c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e202a59e-3f55-5683-9669-bb335bb85a4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:44317e90-3382-5a58-8675-62e62202dd55", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.11.RELEASE-tuxcare.1" } ] }