{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a4e4a113-ceb7-5802-9408-86b44286f3f6", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-test", "purl": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1", "version": "5.2.11.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4b37358a-c137-59b8-99b1-68cb18eb4340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:548db3ec-a217-5a2a-bea9-e9a9fb6e2db1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d30a56d6-eef5-5c23-9b73-e4b05319c701", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8b25dca8-c418-521b-83ef-02f2c6a24b97", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:70bcc54d-a465-556c-81c2-3836da973b16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:94dd9494-b9b4-555b-9117-47996478043c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5291d7d2-43c2-57f5-a607-63bf65fe4354", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4e440124-59d4-575b-9aae-531370a738b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a26465a2-8fd5-5eac-abf2-5b34b2699326", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0f235677-dc2d-5bd5-985d-2d33e85ebd2c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:91fa1749-4fce-51f3-9832-13888a46d78e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8a81ef02-09d3-5ae1-8178-f13cdb00ae90", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:982b31a7-8994-5650-88ea-ac7fc2c9b680", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:edf9c803-b2da-5c42-bd92-c6437edf36cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6da42983-ac53-597f-995f-ee9a5333bfb9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b9bf8b0e-af49-5610-9051-b80c778f6651", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:550be20f-4644-538a-bd2d-6b5409e10a5d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b7fa8cc1-c15a-5bb4-a312-99157e7d7d10", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test. not_affected \u2014 Target version 5.2.11.RELEASE does not contain the vulnerable code pattern from CVE-2024-38820. This CVE specifically concerns improper use of .toLowerCase() without Locale.ROOT in DataBinder's disallowedFields handling, which was introduced by the CVE-2022-22968 fix. The target version predates that fix and does not perform any case conversion in setDisallowedFields() or isAllowed() methods. T...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b73b87d2-1404-5c16-b52a-df14f3ca9ab1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a898e9a9-d6fe-57a9-b845-61436f9f3f71", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2f6491d5-b765-5671-ad71-d442af039a40", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ceb767bc-f5d3-548a-9cf8-14938befd2de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:abcabe97-05db-5b06-b2c1-badbcf937fb3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dfdcb807-a208-5191-a3a2-6a108cf19568", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bc3e2bfd-5046-5e7f-a292-e93e645ff726", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:72ed6f0e-f9cd-542b-a36d-05cdb237d326", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a4cc32a5-8d80-5643-8afe-4797f7f3dc2f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3026cdb6-790b-5c59-bbaa-8c9676f1cacd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:427e650c-beba-5477-ad67-7a0e86aa3275", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:236d3fcd-bb29-52e1-81e7-e0d4732580b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:60a61976-6ad7-57bd-bd52-be204b298625", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2bcc4fa7-da41-54b3-a37d-ad6880036b50", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a5395ae1-fb0d-5b72-995f-b927860f2f48", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2ead04f8-ae86-5722-9614-03f0bed3de88", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fa115923-04f6-59e0-8d33-a32317bbbff0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:92dd8413-4f34-544f-8ef7-c6d5df0480f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7d2d9129-17d6-593d-adf1-2b9ca13b2904", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:03912302-79a5-5c97-8fd7-33b40784b829", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1890cf0b-009e-57b1-b90d-159afd80e4c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b8719252-7aec-5305-b93c-8c4460341816", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3b205a68-f31e-589d-8b6b-821a25222a38", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:77d665f2-ad77-5917-8caf-4df04673b6a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:84b88167-bcac-58ca-9ea0-33ee15ee7afa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6fe80068-0cbc-54bb-9639-338f74ef37d5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:20a37ef8-ec1e-59b1-a6fc-5ceb4de9b896", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:860651fb-3e18-5a63-b808-b46ef4525278", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d4a1414a-70c7-5944-b273-c9e0583eddd6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:853f953b-74e7-537f-a9bf-5a832cf3edba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d20cc9fe-67b9-5960-9c52-326e6455224a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7e19fc2a-e83c-5ca6-9429-65ddb15675fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cb53d5d9-582f-593b-9f3b-7381478dd9fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:06bf21cb-8983-53b5-9f5c-dcd47b6b54ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:67a81081-e5c1-5eef-9259-df7ed7b998e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:60315e09-679a-56a2-a5ff-edd36fed51be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:60eee3b5-9a1f-5b94-b7bd-68a3013b9632", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:688e9f1f-b263-5c8e-88e0-040f9aaa6a0e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c3acca7f-d2bb-574f-acf0-b6c6b2a9a103", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-test." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.11.RELEASE-tuxcare.1" } ] }