{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b71c0f2d-0131-559f-bfa1-570b1e971084", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-web", "purl": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5", "version": "5.2.0.RELEASE-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:74f0aac5-dfca-5486-8cd4-1e171baf6052", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5397", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:821c9e6d-0fb3-5647-a621-c22d42c0179e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5397 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:07dd7514-30ba-5356-b7b8-e32bbc751b17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:af526a1e-7dfa-56e1-92bb-9f0cd8b4d802", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:08647ee2-b327-588f-970c-9830e25a10fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5cabfd65-a195-563b-8bf8-6c4507bd4be2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9adae113-a746-5b9d-8724-a2699ad7c18b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c2bb1cf6-c04f-5068-8587-06d0eb7a0159", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c3ee7d9b-44b1-57ad-a48d-01bc76a8c18a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c12c5f40-aa75-541a-8e2e-5eeaf82b9154", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:403ad69b-e383-5e76-a175-dcc108de1d15", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d4db1100-d1dc-5ef0-ba41-1d4b357cac6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b4b454aa-cde9-5337-a6b7-36a0e7360a8c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:fc6d9448-3c5f-5655-8db6-31af92eb0b5b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b1a72884-7949-5672-8ae2-0fe00b0dc1bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8552b38a-722a-5bb0-a535-ee7c58d7f56f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e095ca92-5a4e-5f60-86ce-1d4c9f5754c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:35aebd64-a8a5-5b53-adab-48824a7f78d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a0883505-a8d4-5dbc-b9a0-9c4462d9aa46", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-web 5.2.0.RELEASE-tuxcare.5." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:74e4ff24-93b9-5e29-942f-5deba68be983", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f76ae833-3845-5e0a-8e77-d4c2000576c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:74fd47c2-9b68-5ae5-9702-eb1247426170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7a857b04-e6b0-55ab-8da3-c6a740525158", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b84d6f4f-9b1a-5b91-8513-2d5730c9a26d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:09dac4e9-0536-54f7-91e6-14a91ae785a9", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41249 is a false positive for org.springframework:spring-web 5.2.0.RELEASE-tuxcare.5." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7da45fe5-0c6d-5efc-b17a-1cc1995e6dce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:391ee7bc-4c67-59d3-92fa-ec2373a4d818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f47b243d-df36-5164-95eb-1817c57153e0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:325cd948-6f64-5e2c-b359-0fa847c40175", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ae02e2fa-6c5a-5e3f-b0b5-76e6c2caee73", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:bbe0d1e5-f8e4-5f86-a212-7a8e9a6ac1e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:71a02ec7-2db0-545e-acda-7fcdefd36067", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d299f897-a66f-50b0-b7b8-d54eb0fd70ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1c8430ac-31c1-5166-b03e-09014825d3b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:855ca961-0dbf-53de-ae1f-4d2b135c054a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:554d857f-54f0-5c1a-a374-8b262ffbd622", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f6447f44-bcd9-5baa-8e4b-472fd619f253", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:898eaba6-0e71-5479-a004-f6b975d9a5dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a6c065a8-f1bb-5c59-9883-0db983896e9c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b89819bb-ecce-5903-a537-5bf53e01058d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:491663bb-7320-5c47-b752-3343ac5f531f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:20843d36-c3f3-58bd-af17-417a3ab47ee0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:bd4f2105-64ce-543c-9ba2-17e42f2c3110", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7bce59ee-bffd-5089-b9cc-bddc9c5c5268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:2ee5f673-fbae-522e-ae14-3e314b147e1b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1e73aa2e-4b71-5863-9d91-5c3386364ce3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:138e469c-5734-5fb3-9075-c2dc807c8c95", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web. not_affected \u2014 Target version 5.2.0 uses a fundamentally different multipart parsing architecture than the vulnerable code introduced in Spring Framework 5.3.0. The CVE-2026-41853 vulnerability affects the new native Spring multipart parser (MultipartParser and DefaultPartHttpMessageReader) introduced in version 5.3.0, which does not exist in version 5.2.0.", "justification": "code_not_present" } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:dfd00d77-2959-5e77-a2f1-fdee8521319b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:35078bc5-4ce2-501d-9050-3cfd9b693e86", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6f9f5e9b-a495-51a4-a5da-9aa82e756558", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:39e9b4fe-fed3-5eeb-80a3-d924815e9850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:31f12522-440c-56e8-bd18-9cd1e7681857", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e88d43bf-22da-53cb-ad8a-e997a358d294", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:2c3538e2-e4b0-5a5d-9474-87bdddb728d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4075ef94-5d6d-5f5b-a892-d107c3fd6438", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:542f18e9-eb6d-59d0-8e2f-418d1927a57c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:772709dd-23cf-5a53-b614-cfe1ad90add5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ae678a91-2009-58d7-8e18-670bb4298bd1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:91e72de9-6ebf-5262-ab55-5acff35fd198", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:764e4fc8-6aac-5956-955f-5c23e4e7cd80", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-web." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.0.RELEASE-tuxcare.5" } ] }