{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:862fde5f-6cb2-5222-8ab6-1c75dc7c6ed7", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-web", "purl": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1", "version": "5.2.7.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:23fb4f72-4b9a-598b-b1b6-1e5bce278e39", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:97a02400-997a-5d63-a5b5-e41a782c79ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0923c105-4760-5f49-b7d7-21df00afdd7a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:af017468-3d74-5865-a570-b958fe95bf56", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fbff4b7c-8d2b-55a0-aeb6-1652b5003cc0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7d56a705-6aa4-57cf-90e8-78794be5f871", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:991ed946-a4ad-5ed9-b5ef-166bcf779790", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a3718b00-5562-5869-bb91-6b915a31b9a1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:945a8062-9f8b-5483-bcb9-e0827e023a41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:89cfba77-bfa4-52f9-b7c6-4c3f6e1b38c2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d7040e22-daa8-59d4-85b0-27e2d9bb2991", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:683ecc2f-6bdc-5979-99b0-9cdd2ac0b827", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:532ee4ec-5b1b-59df-8833-0a8d8bc4dc5a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8ed53ea7-603b-5195-a45d-eca27f31f04e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8b4d7d91-2050-51f2-bc1a-e15660cf077e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:166ade22-c2bb-5a44-a3b4-8b41350c6e17", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e38689c7-bf46-5914-bc8b-118e42b5cb8b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:860b2e65-458b-5989-900f-ea43f861df06", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7e096657-aed3-5978-a525-2f06856be8ea", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web. not_affected \u2014 Spring Framework 5.2.7.RELEASE is not affected by CVE-2024-38820. This CVE addresses a locale-dependent toLowerCase() issue introduced by the CVE-2022-22968 fix. The target version predates the CVE-2022-22968 fix and does not contain the vulnerable code pattern (toLowerCase() without Locale.ROOT in disallowedFields matching). The target uses case-sensitive field matching without any toLowerCase...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fc9ca507-2e87-5687-a727-1ce59190d4d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d753dd42-469c-51e4-8284-c03ddf8a369d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41242 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c087585f-dc55-5546-b7d3-1152f105045a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ec817459-68ab-5490-9a7f-2c844f94a4a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c9ccea11-9d8d-5d53-85f8-85af591bf448", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3fd16b31-9177-5336-ae40-b0d7636cfc35", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8d58e4b5-c98d-5f9a-ba7b-0b51d1c0581c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1c315c1c-cd9d-5f2e-aa5e-46acfee738fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b67d7aae-afac-5d01-9811-8ebc3e9deacc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22745 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f4e7be24-3b4c-55e9-8971-cde83f7d9cf2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bf1091f7-c56e-5e7f-ac12-99f573d89e2d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ca7daf10-3e3a-5146-bef8-e348551ac22f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ba9902f9-7918-5462-afeb-daf0efeb0999", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:224f8f33-26b5-5635-a587-32288b55a551", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cf5001b4-5637-5fa5-a7c8-aa1bb92f3194", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3c03f824-fdb9-5192-9864-6d42fe3dbb6f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6e204fcd-1f92-51fa-aa00-4c60a3150f94", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ed288750-b776-544d-942a-35c604b152ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a9dc7168-838b-5745-b5d8-7cbdbfbc2096", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:31b7aa87-3ff8-5018-80e8-66d99a48d9e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3c0d44ed-55ba-5a74-92f2-f046ae7ebe63", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e63cb239-c0ad-5962-b681-9186266ca0c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:53a4a76f-f302-538b-bd0c-08a7df6fcdbf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6f71075b-87b1-50a4-bd8a-31e0774c8a98", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b3a2cb19-b737-587d-b75a-0f8c87096204", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:31f4f041-889d-54f2-b403-66d4792c4873", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c02a23c8-b4b9-5ba8-bdd2-9ca8a25fa032", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:117a97a3-da5b-5405-b339-1c53f66b1dac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:50e727cc-80c5-53c0-a01c-87710eeb576a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:998e67b7-6e72-5406-ac58-2dcddf8d717a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:09ba12be-e26e-5641-ad8d-d2b04a061b28", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:473612db-4184-5d77-b340-015baf419261", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6f874f65-ff84-5b61-a80f-ab85ac047ea5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a68fad06-ca13-5f3e-8ebe-b3e15f82093c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8d497f60-7af4-5ad8-a028-db0075e01887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:117bf78a-3a74-541f-aad8-99ae3032f2b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bbdd98e4-3e14-519a-ab81-447438c4fbef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1681db96-6bfd-55c3-b3db-933a09c7be8f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:25c3b8ac-6327-5950-829e-3d7555c6a2d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-web." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.7.RELEASE-tuxcare.1" } ] }