{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9ec86242-2ec3-5063-b5aa-60731c925aa5", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jcl", "purl": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1", "version": "5.2.7.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0fff0fc1-db83-54a6-aaf0-699f9bc4c3e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:121250ab-fa8e-5a75-ba3d-2f3ae4230e29", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:81723acd-88b5-526c-93ff-3c430bc67a9c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4cfae943-b69c-582b-89e9-d7240dfb4eab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c98809a5-a1c0-57f6-810c-49a97ff5f128", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dd3482e8-9d69-514a-bb51-0e5a0563956f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:08ef06c1-fbaa-54b5-8805-04a5e852aa86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9d2e7593-e27b-560e-ba77-8edcb18013b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:15197d3b-9659-530f-8f0d-2525dac2683e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9f78d401-9928-5247-abca-2d176de5ee83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cf444438-c99b-59eb-bd1a-94f1ccf5d4df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cf8b704a-7d69-55b6-b0d5-f46ab1c9229b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f873ca7f-80d5-5eb6-9952-5b287c26232d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5a2c37fa-2168-5759-acdd-9c4879f45471", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e83a6254-472b-5569-8710-ad3912002f90", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:63c8e0f6-ecb8-55ed-a73f-f6965e818c11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:86f55d24-ff11-573c-9ddb-bb536cb3f92f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:96ca3a5d-fa76-5431-9f7d-bc531b6e1793", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:296e6a06-d2a1-5411-baa9-f423d6d15116", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl. not_affected \u2014 Spring Framework 5.2.7.RELEASE is not affected by CVE-2024-38820. This CVE addresses a locale-dependent toLowerCase() issue introduced by the CVE-2022-22968 fix. The target version predates the CVE-2022-22968 fix and does not contain the vulnerable code pattern (toLowerCase() without Locale.ROOT in disallowedFields matching). The target uses case-sensitive field matching without any toLowerCase...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:13356f2f-27a5-5dcb-b9c0-3436024e9139", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2e4e5c98-ff8b-5440-9e54-2ad41038b7d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41242 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:01eece03-cff0-5f67-9658-63b4a9ee7fb1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:82dcb06f-46d8-57b3-9dfd-c57df438397c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f163aa34-fabb-53da-9be3-77c84f44544e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6e6985b3-6aad-522b-bf40-c4d650ddb9a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:16b28c8a-a74b-5291-a458-1dccf287a497", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:899e1c4a-21ba-53b9-a232-bb189d14ac43", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:80a5efc9-89b5-528f-b3e4-f6e2107dc478", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22745 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:582a73e5-6ea9-59ca-aa11-5b2cb6bab173", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e8cf62f1-afe8-509a-be01-164b228e7493", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fd9d8c36-d8cf-584f-aacf-472cf493b474", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:68eb41dc-9674-5968-a0ee-eb02cdc331ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4083c018-0ae4-5a6b-b06e-8fe2b55059ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d28bfda9-e513-54b1-90e5-f29810bacf18", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ab921f2b-ccd0-5a8c-a743-cc8b3af0586b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0b7643d7-4f30-5177-b9a9-5ff204e2fa5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:651904fc-d30a-5515-8bfc-3f3bbcf39a7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0620b911-ad59-52bb-8ac3-8afecb128b62", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:33158d7d-71d7-5a10-b668-641d4ba9b027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9361855d-927c-5a17-990b-cbb14f7ea21f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b8e7d896-83f9-5955-98da-a6578b068162", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6edffe48-9544-58ac-b466-e8177acf41d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:85822e39-c98d-580e-bea1-c886eda2e62f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:14cec7a5-8002-5177-8f8c-d4454d41f099", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:42bf9918-dc5c-56ec-8c2e-dc73ce209cb6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:faa62f06-7a9e-5ab6-bc5d-910b8bcb2df2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0d3be3c6-db58-554e-9cd9-595fb16f7a39", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1bc81294-930e-55b5-a83d-c1fda8197bd6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:76081efa-a2c1-5514-8a32-e553eab8424b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f0f0eb70-4b5d-57de-aa56-0665a5bba66c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1c730da9-aeb1-5dcb-8050-faa1c8bdcb8a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1729ec2d-9b76-529c-b052-00a68a8c800a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:eccf153d-7d56-5e55-b26d-2662f769647d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4f95470d-f2b2-5c1b-a164-1c7e5b3d65cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5517075d-df6f-5870-92ef-f47a817604e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:870b9fbd-8c80-5a7b-900f-e0c97c31244d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b9b5a0ed-aa05-5893-8512-be86115e5751", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3c4bc8bd-abe7-5f97-8247-c1e43cf605d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-jcl." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.7.RELEASE-tuxcare.1" } ] }