{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3bee2502-c0da-5da5-8e66-7b5d879262f8", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-oxm", "purl": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1", "version": "5.2.11.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8b2929c9-b414-5932-b469-2e37f0b6145b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2fb3c4e0-e50d-5ee7-ab8f-45a297821d3c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3298ac76-1b68-5601-a08f-ec017baede85", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d2e31ca9-c686-570b-8c46-e461350b3eb9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3ed65c82-3919-59f8-85fc-ba4071d48b9b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5b6d2dd2-577f-5ec6-b6c8-186af09839f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9f5719c7-5d7c-58b2-ae4f-f16215f924c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ff712e67-89bd-5b96-ae2f-866204f1e465", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dcfe3888-2c69-51c7-8753-069008bc4820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:598b6483-9466-54e2-892d-a4fdbbd1c54c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6278bb16-b82a-59a6-b00d-3ae1bf9daa20", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:684e82d3-e3dd-5cf5-a97c-2bb47b13875e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3f21ff12-8f98-5e77-85b0-3af43faeb65b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5cf954dd-3fbf-593c-9de2-0d236f6e87b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:84c1c093-1c98-5bf0-90b3-02e59973d46c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:806c416e-14cf-5328-a146-6d98d903cd11", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fca8ccd4-f71e-502f-8435-2b002545eb33", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7aa4c722-14ce-527b-87d1-378484f75ddd", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm. not_affected \u2014 Target version 5.2.11.RELEASE does not contain the vulnerable code pattern from CVE-2024-38820. This CVE specifically concerns improper use of .toLowerCase() without Locale.ROOT in DataBinder's disallowedFields handling, which was introduced by the CVE-2022-22968 fix. The target version predates that fix and does not perform any case conversion in setDisallowedFields() or isAllowed() methods. T...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:056d1008-9a8c-500d-baa7-88e2a30055cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ce85c5e7-d3b6-5a09-be06-b70eb6774c5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9d72407c-2115-5509-867f-b4ff2c7c2245", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0a2ac4f7-9d01-5626-a27d-564768db916d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4a64081d-d445-5a2c-9e02-51714f4110e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b9dfa6a8-485d-5d8c-9b59-f5af7df6f883", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1ca34387-a77d-582f-86ee-8b37ceaf4a87", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c25d3483-9bf7-5136-a8b5-d4c93e7ff729", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ff322cea-4d3b-50cb-a197-2d3decf9468e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ccc0cb7c-d839-506e-81d8-656b0b56e222", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fbed8096-9328-552f-a745-271803e1b81f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c7894320-80dc-54a1-a47e-8d781f588f9c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e07a182c-9690-5f97-ae19-6ce440d2df88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e64b7870-9f14-50d9-a453-de39392ac0f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a751e3db-edad-5329-9577-72015e103bb5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7589ff2a-4b73-583d-945c-3e1a56a7bd3a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d0520f68-15b7-5c6c-87af-3e2a72fd65f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:88f214fb-679c-5c55-ba00-110ca9187132", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:900fdbfe-6a0c-5e3d-9d2e-0e2ae4171e00", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f25bd2f9-31c1-594a-8871-963a75117a30", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bcb33fbe-f2bc-5a24-8c02-88cc4829d562", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2decec90-3d4c-5219-8ae3-589116ebc626", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0e9904b1-cbd6-5eae-b45f-988a8e4328da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:beebe739-72c4-5ba4-be23-91a10769b232", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8fed1e07-3933-5bf5-8fa4-5ea1995442dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a42fff4e-a602-5267-92b7-a931e19253b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:92758169-eeb2-5f62-bb6c-4acccaa25673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b770d980-92f2-5e09-a7eb-97b2febe9e27", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d4a4c736-a05a-5a22-b527-36227033634b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:051d1ec6-d5eb-55f5-a9ec-cb7990415add", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:709edf8a-c9aa-5e74-b5a5-42720b4f3c9b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f6e65753-fcd7-50de-8be0-d46ade5abaf9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0555ea82-cb36-5177-b3c3-709423365ea5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:97d7d888-4b9a-5483-8b96-7d22b96eef37", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3bd8b755-a2d6-56a9-829c-f3d2038d8713", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3c953dff-6ec5-5471-8e2c-cb02a935cb4f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:de0349ee-0e50-554c-b125-a1414e0d8620", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3852bb56-553a-58dc-bb47-a4f322d19628", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:43a47030-5296-51d8-b501-1b1a08555572", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-oxm." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.2.11.RELEASE-tuxcare.1" } ] }