{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:61ce49da-4b12-5aa4-938c-5b1a27619716", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-test", "purl": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1", "version": "5.3.6-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:095d90b9-4589-5738-9800-dd89176d5313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:88c719a6-a3f2-58f7-86c2-d528bcf434e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:a688142f-ad11-5d5d-9625-f0b19693be0a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:2eb6967d-5b22-513e-8c66-71a4dd4430d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:d1771f2b-5d55-5a8a-889e-abc62a407566", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:bd9dc930-9dde-58ea-b830-516d441bec23", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:51efc895-6093-5f0e-b8c8-9a609bd6d706", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:e8559275-7cbf-5d3b-b287-74851454b158", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:f74a1cef-b834-5af2-84f9-860531f9160a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2023-20860", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:999db84a-7e26-5c40-a34f-72070afa661d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20860 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:c7e95260-dcec-5e52-938c-4f42ac3c4e22", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:d325619e-c20a-5228-9198-8619b28b673a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:03a2e549-1e0e-56b3-a833-11cdb46bf373", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:5c995b60-10c2-592d-9a02-92a27df4071d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:894ed06a-d851-5c85-af68-08a9018957c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:528c08cb-c772-5b46-8446-83bdbd721ecb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:d3844bb6-9938-552c-8bad-9c5974869343", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:4ac32fa3-27d3-5b55-887b-e5a6806ea44c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:d6cfef80-77dd-5e4b-8e39-ce4cdcd48865", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:4cec22b5-2cf4-5b52-8289-ad0566d8f596", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.3.6-tuxcare.1 of org.springframework:spring-test. not_affected \u2014 Spring Framework 5.3.6 is not affected by CVE-2024-38820. The vulnerability concerns locale-dependent toLowerCase() usage in DataBinder's disallowedFields matching, which was introduced by the CVE-2022-22968 fix in version 5.3.7. Version 5.3.6 predates this fix and performs case-sensitive field name matching only, without any toLowerCase() calls in the affected code paths.", "justification": "code_not_present" } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:d6478fc4-5273-5e6d-8723-c8e7779a98af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:c68fb328-41b0-5c6a-87cb-5fef4b3a2484", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:24f373d2-86be-5854-971a-f1188699825a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41242 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:aa7beadc-783e-57e5-8144-4ceecd788910", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:b14b1820-ae35-5e5d-be05-ed659c54bd26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:e7df5e0a-2465-5e3e-aed2-e63f781e043e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:db125310-46c1-5888-815c-ccf9becffa86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:10974925-97f9-5a0e-b842-2d46baab23d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:f6dab4df-4281-532d-9996-5aea1c460c44", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:8a132dcf-be13-562f-8144-15384a2bd3a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:61989d3e-a9f3-56b6-9957-b38f742f51e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:96d720d5-9953-55ca-8cdb-11e8e3c3c332", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:32db37cb-c8c0-5b22-8fd6-0f60fb52ab20", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:02ceb286-196f-5e5c-9c39-57da47018a06", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:cfc547ef-3ec5-554b-8857-06771fd80918", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:4a8a0c01-5908-5e94-a223-72f6d562466d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:020da49d-8113-5904-8691-5c7b675d735f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:1cf93006-4e82-5784-a09d-a0d56a06aa63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:decac33c-3730-59bb-b8be-ffa35365a07e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:853bb069-ea3f-53ed-9705-4b7f1b6d7700", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:e7902130-1129-5fab-a4db-afa6779aef31", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:d02da27a-ca03-5563-80d7-f99857154600", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:3b83c0f1-bf32-5ff5-9a99-0aa4a9ca3d8f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:9d4d8375-8f01-5eef-b29c-3f87a98cc9ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:5f851594-8a53-5adb-80fa-9e0e0b643a1c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:4bc0a9ab-5bac-5cf2-957c-17a7ef2cff03", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:6c8eccb5-2753-5760-9508-459f52497212", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:48b2c5b2-5614-5ea1-80ad-9de2194465c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:608a98b9-33d5-5d82-93fb-71171b9d763c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:2014c5a6-d85d-53e2-8ca3-eac089f744c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:487b4b44-3353-5b18-bfcc-88349dcde678", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:76403523-2d16-5c03-8c7d-fd560ca2efdc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:7d488bc2-0c04-5816-ae0b-a63f1515e72a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:c65c6d4b-e4c5-56ed-854d-7a3181252da4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:9d956c96-49ec-56ed-8bc3-ca86a040f305", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:f0b4a380-b055-5a17-9e97-0f156bcac302", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:66c2701c-07f6-5e59-bdab-c98e55d04826", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:98f4b1f5-6cfe-57a1-901a-b3e819c47fcc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:9a0f6734-b9a9-5e6d-aa72-7499935c5e14", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:c6dafc3d-9261-5a87-8c7f-3660950871a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:45275a75-aa29-5bfb-8eea-6139ce5c4da1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.6-tuxcare.1 of org.springframework:spring-test." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.1" } ] }