{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ef1ba8ba-37c4-562f-a01b-51e721b05762", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-web", "purl": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1", "version": "5.3.6-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:6c4f6a7f-18f4-54e0-b062-b7f58598777a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:10e4df08-5833-51bd-9d6a-c6e9ce1625c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:9dfa3ae2-ad82-5427-a17b-631c635c600f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:7a9ab17a-8ecc-5d2b-94f6-9a8e50a6e190", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:c738a042-d347-56cd-9117-b621a9718d02", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:ee44f1c8-a7d7-5b3a-922c-62c3502626fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:3e603748-7d0d-5952-a298-c87692edbf31", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:027536ea-7143-5380-9d77-303491326998", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:ecc0ca74-ce54-5edf-a2c8-3896614b3f80", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2023-20860", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:4537c039-780f-5418-b5f9-9223261f910a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20860 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:6dd22f12-907a-5ec6-be23-17904b0bb0ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:37c42362-05f3-5c41-a4bd-d8e82884f7b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:c2147fd4-9317-5b71-ba24-7b3b2bab75f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:bb3f61e0-0b18-5270-a5d1-4054179f5012", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:14ce417c-e838-5519-a9f1-f084cbb34e39", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:881601ef-ae70-592d-91a5-085beffc9f9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:09da19f8-99c3-5e71-80ea-91eb5d41b34b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:11e8d9f2-b673-514b-a53c-a9653610e6d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:6f289665-8026-5394-85c4-ee2c61b4824c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:d7f813d9-2c51-5877-917f-02adc6f7422b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.3.6-tuxcare.1 of org.springframework:spring-web. not_affected \u2014 Spring Framework 5.3.6 is not affected by CVE-2024-38820. The vulnerability concerns locale-dependent toLowerCase() usage in DataBinder's disallowedFields matching, which was introduced by the CVE-2022-22968 fix in version 5.3.7. Version 5.3.6 predates this fix and performs case-sensitive field name matching only, without any toLowerCase() calls in the affected code paths.", "justification": "code_not_present" } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:91a672a4-7130-5336-a51b-e650ecde4cc1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:18e7225a-3859-5941-91fa-63e27be1051d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:92ea4924-bc5d-5c58-8394-8f9fff39a5c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41242 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:efe0e45b-9b83-5175-be52-9e426f60f79a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:3183f712-b6b4-5f74-887f-c1759dd44bae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:29eea579-9e47-5c2b-9e4b-7b7be7b4849c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:4be42e5f-cdf2-5c63-aad8-9db57f5a7bb2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:20691150-3ee0-5920-89bb-967f0f36819a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:ac7e2269-7af5-563f-9368-9a9f75b1ec94", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:baf7d9f8-5d86-5e40-be6a-dc9e8b36bf05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:7b361569-5fd9-5c75-b895-5a57e152be06", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:66e4aef2-2e3d-5a62-b0e4-3584e48e4d46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:40b42d8e-e305-5b89-8a59-a25dc253eb93", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:96e3b6b1-06f4-5be2-ae3f-f215ebacade5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:87f19027-f23b-5fd1-81ea-34d5111a96fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:fc03bf4a-a967-58ba-8979-bb309203f0a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:f35067ce-ff56-577b-aa2b-c96aa220c778", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:95860997-2205-5b6c-bab9-3f8a371d8570", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:324a12de-6260-55b7-9149-bec74671e9d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:116f2c66-ebaf-5338-9aa0-bab361b0abe3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:4c3cab25-8038-5e1e-ac95-11e619295ec9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:888b14fc-dcc9-53af-93e6-c419c22c57d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:a425b5b0-5116-5570-86c0-cd3a37d6cd5b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:3ec63f70-5b5b-5c0c-b0e8-7e79b9e00bf0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:d60cf7ac-1cdc-546f-b2a8-98ccce9b5105", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:c154c742-74ca-5059-9a54-af72b65df514", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:bf13aa30-5d0b-5f9b-8a6c-6695f9ebc5f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:60898a56-ca5a-5a45-a0c1-27b8aa55e3c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:95696a66-54e2-5622-ba8a-042f2c94f9ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:71e0a5a3-746f-5e72-970f-d5b18284c67b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:b60eb271-56c0-5207-9850-caa2b0b4e002", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:40d3baf3-ee23-5750-ab35-38af18bd7e5c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:95f8b3e9-2987-5ec7-a0d1-833d6816ee28", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:009ccfc3-bef6-5925-a12b-87647a127d21", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:27c2a0fd-d8f5-5a16-8801-9421dcb07db5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:c63bbbac-14b0-54e9-b936-829070d58289", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:010d42f8-72f3-5c21-9b78-955f71f79ca9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:e221df36-0c29-5521-b6d9-c7ac00059366", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:36ccae44-7d85-56c2-bc6a-4526c2afc0d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:11bc356c-f664-5c08-84ad-89ade990625a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ], "bom-ref": "urn:uuid:e478a909-4745-583b-b668-c48147e81448", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.6-tuxcare.1 of org.springframework:spring-web." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.6-tuxcare.1" } ] }