{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a45a14d7-5faa-5143-ae22-be8e36634ca5", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-tx", "purl": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1", "version": "5.2.11.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5daa65e6-c819-5207-87ea-2e37a245ada4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c912b946-4ec9-5edd-9b6f-4ae8fb2cdda4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:91a95da4-0750-54b7-ad9c-4553f3d1093e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e935abfc-cf61-5513-b972-e1113ee92da5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:65866c6f-2e8b-52f9-84d0-2b54362133d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:389197ce-59cb-52a4-afd9-ff8335f99dbb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:80ebf0eb-21e0-59fe-92df-d31e7d134f99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d36c52db-94f1-5f90-b3b8-d613058dadf2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c85b9e2c-744a-5715-9f5e-e28612baa1a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f726c96d-7a7e-5033-aac5-1ffa1f262e12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5ea7a8be-b82d-50d3-af9c-bde684c3c66d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6a5f2817-9e23-5dd9-b531-c5a7904ae71b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d00d9769-9f56-537e-9194-608d95bd5abe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:21e43939-7d62-5843-bd9b-457c0b1f21e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:af3021af-de8e-507a-a655-ade64afdd9e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4d8a7012-0dc9-54c6-91d0-021e612d78d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c1c5d448-dc35-51d3-a5db-24a016f31cb7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cd716d2f-1292-5da6-a67f-36c408566e2a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx. not_affected \u2014 Target version 5.2.11.RELEASE does not contain the vulnerable code pattern from CVE-2024-38820. This CVE specifically concerns improper use of .toLowerCase() without Locale.ROOT in DataBinder's disallowedFields handling, which was introduced by the CVE-2022-22968 fix. The target version predates that fix and does not perform any case conversion in setDisallowedFields() or isAllowed() methods. T...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2036c30e-fcb8-50cf-aedf-1ffeec2102ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8d8bd1e2-37a7-5a45-996c-91472914148e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8670b91e-3a28-53cb-88a6-5cf8bdd23f18", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:362f98c7-3775-5b8f-8452-9e23d8f21dbb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:82b466e3-b396-55ef-a230-aeaa45462425", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4a11ff54-2c3a-5cca-aeb5-3a1c9ba82206", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:15d8e20e-3404-585d-ab33-f6739e2da0db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:faed629e-f498-586d-9f59-2e312480d538", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:00053dc6-64a1-521f-9140-aaa72daf14b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3e41b13a-78c6-5e1a-a3be-b098d14eb52d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7ca30ff7-de62-5fc6-8579-f39f9ccf469f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:416e25a9-9560-5f23-9de7-276618c14453", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b562f6b6-85e0-5354-bd82-5049db7b1e63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:be5dfd9f-aae9-51bd-9f13-4827af3ab3be", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:503374c4-bdef-57e9-b76d-d749d4a4898a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ac7a2890-35c0-570f-9526-f545bce0d0e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:97535a04-0eb4-549f-ae36-9332d416e51b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3e47473c-45ef-548a-b087-5c0fab164c38", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ef6141ee-41e6-56f7-b4cd-b5163e4a9b8b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fca94c39-f071-5c3b-b076-48b6bdd30507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c3d6b4b8-6194-5974-9e3b-e8ccfc2141dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:95954145-6422-5937-bf21-60e77060ea00", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f8e27686-7c03-564a-a88b-557855a4a259", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:42a5b361-1467-534f-b3c8-7c2c9878e238", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:95802adf-ad2f-51a6-9ff3-e58c966ec638", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5d352a39-a740-5987-9fc0-ed9820deb070", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:df7e3259-7e78-5ec6-a799-32425219a294", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:27085065-822a-5f06-8681-86a754f8d3eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:469f68f5-99a6-538c-ac0f-43bda80573d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:eddf9cff-e598-55e4-990f-1bee271d1b9c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0a7a211b-23ab-55fc-95f3-51dd485e9a61", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2ffd18c7-f445-513c-a7e9-743cbd54a988", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e02ddba1-e915-5f48-b6ca-c51c5e7cae47", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:20ba9817-7175-52ad-ba7e-1e519ed7337c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:53a67f6c-e64d-5941-bfe7-6d166aeae447", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b30a92ee-73b8-5827-95ca-dd8fa14cef23", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f9d8a969-3ce8-5175-8a83-d087bbf37e61", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2fdd2066-6a4f-5c13-938d-9dfef7b76305", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:97cd0fec-23ac-52cd-8ece-f04875404b49", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-tx." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.1" } ] }