{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:31b1ea42-9be2-5d57-82ba-be2c09afec69", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-web", "purl": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1", "version": "5.2.11.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:60fa7ae3-6132-5bdd-b40f-580ec667da95", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:23942e9b-b63e-51f7-888d-e8025feb0ff0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0ec102b7-7708-5a28-b943-10f6b7ab70ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9668ee2c-8372-54c6-8444-f54b946fb864", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e72765c7-7dd2-57d4-a6da-d8b30a4c3402", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:36b66ade-402b-511b-a9c4-e78803e9dec7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:960b61d7-062b-5501-8b30-f7415b1efc39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fbbe361d-d902-5ca8-a46c-927bc8799764", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:16f6625b-8c42-55a6-871e-5f4227d5078e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d02aa4d8-e57a-57a5-a9e1-619cc2904866", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:678e59f1-7626-5703-9a3a-cddf9d6295ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:92d4af9e-63de-5d8e-aabc-64b878bfefdb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:648a1b82-d9a1-596f-a03e-df99d1fb5de4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b8a61fba-552b-5bd8-a1ba-2ee9a1653262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ce22087c-43d9-5089-bcd0-d0e2adf13ace", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fe6ccab6-ec06-54c6-b968-8205af0f4322", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8ab5b0e6-3942-5afc-8c18-ef9dd39ea069", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:df3cc1f4-3fec-5b79-b7e6-7b6f30fb4f89", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web. not_affected \u2014 Target version 5.2.11.RELEASE does not contain the vulnerable code pattern from CVE-2024-38820. This CVE specifically concerns improper use of .toLowerCase() without Locale.ROOT in DataBinder's disallowedFields handling, which was introduced by the CVE-2022-22968 fix. The target version predates that fix and does not perform any case conversion in setDisallowedFields() or isAllowed() methods. T...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:639d39fb-01d8-5ff6-af63-a388ad47c30d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fc884283-c4fd-5dfd-850c-1289f8e40e03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b6a0dee8-3c78-5c90-8c70-93143664f6dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:265cb44e-92b6-57eb-b79b-236d1f549d1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:16fa6fe5-5525-5c5d-95dc-afa5745070ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:974e648a-59d2-5ff4-b40b-bb08d915f427", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:21b49f8d-77f2-5771-bfc5-e03058e6baae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5f936b11-e9eb-5d5f-aa35-16433b855a74", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:60d9ce2a-aefa-5128-be9c-399cceaf4074", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0491991c-1111-5406-afe9-a5032f3f810f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:261c1eaa-26a0-59d1-acf8-8fa6d3dd3844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e0a4111d-da15-5415-a58d-38277ca18731", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fc873317-8b8c-5167-9093-0f4adfb84c48", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c520b131-ccd8-565a-acb0-ac2afa790383", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:be3a075a-815a-5a63-bddb-36b30b3fc682", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6219b837-c443-5718-ba97-da05ea463271", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:463d8a20-5139-5cf4-8932-5c8656ff785b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:50ef132f-5f16-539c-baa6-2d53072cae19", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c63dc7fb-d529-5cca-8541-3ecea879cf5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:db96ac9c-f509-52c9-8640-f5f1e4b9ba2c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:19749c2b-3259-5143-8633-7df558e16a84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a9b1f9f0-a885-5ab0-9f14-ad096a5f07a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d01ba29a-7a72-5f5c-bad9-7ded44437261", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2fe77911-654c-5355-90da-f2589df89321", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a3804831-93bd-5cf3-a7df-ee695c63db16", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e78de0f5-ac6c-5e22-ad24-93220d731252", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1b47cdfc-b396-53ad-b93c-19ee2373bcbe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6e856093-8937-50b6-96f2-f7f6e034a3c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1f5b1239-a59d-52e7-b2ee-f8a8081fbb02", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:946ebef5-fd56-5842-bc95-cab912a6c4c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:64980103-9b15-5b79-8d31-e728bea0a88d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5855d1ce-7705-50e9-a573-dd8de60d3298", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:95dc657f-53bc-550d-87b7-5fbce7e8a754", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0c9f5d88-c223-508d-b9cc-d668186d64ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f120a745-320e-58f8-a2b9-3b885f4f3e23", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1562ae8b-f8ae-5989-a7ee-d74be668a95d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:27e58298-040e-57fb-8ef9-19abf40b4b22", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fcb7e984-6002-5137-85b0-2c4856402dd5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:668f7d5d-f760-58a7-9e27-c3850f606905", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-web." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.11.RELEASE-tuxcare.1" } ] }