{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e8ee4abe-f7ed-50f3-b716-38fe4a20087c", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-webflux", "purl": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1", "version": "5.2.11.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a6d49e74-7663-5a66-baf5-628d9dc19e94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b5b83ab3-c581-5d13-af57-ca98ec1e6454", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6c30ab56-5428-5e06-873c-2ba0ae197462", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:09c831ec-defb-52a6-975c-8fc09fd2db89", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:80091125-f883-5d8b-9540-a9b7dba1b517", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:399b64b1-3f73-5f80-8cc3-e86e59794b63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dfaa8024-fa87-5e1e-aa23-6428a72f88b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b10b2402-3197-532c-878a-20e21d3c6a23", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5952382a-859e-5ef9-9f95-537dabef438c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6326b26c-dd4e-5453-a340-c377455be74f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a1530c93-f141-5d2e-858f-4edf14815677", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:30f128aa-667a-5bb6-8911-28279a0b6298", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7dfd392c-aa41-558c-a58b-10ab6d54284b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c62a3cac-8ecd-5101-ac63-93b3ee31cf18", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:34dd85f9-028f-5b3b-8390-385c77727d76", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:19e96837-eb23-5964-a847-ec0f7ab97e0a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9aeeac0d-b17a-56cf-8f8b-a85f49980cb0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:46668da8-82ad-5a3c-9893-9f506251ee20", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux. not_affected \u2014 Target version 5.2.11.RELEASE does not contain the vulnerable code pattern from CVE-2024-38820. This CVE specifically concerns improper use of .toLowerCase() without Locale.ROOT in DataBinder's disallowedFields handling, which was introduced by the CVE-2022-22968 fix. The target version predates that fix and does not perform any case conversion in setDisallowedFields() or isAllowed() methods. T...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:784ce070-3d32-5fde-9a28-55b7109e7a86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bfcc89c6-06ba-5033-9177-306842fa1a5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:235c38b2-e5db-5146-a0e5-52f9e36a08dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8819305b-f768-5ea6-b9ef-ed73e102f035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b4612f00-b6c3-5f35-8c13-f0ba65a76d71", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c1628c3b-a812-55ca-befa-b682268fc4aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fdf33018-d542-531b-bbf8-93f7f8268ef8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b897651f-cad0-531a-80d0-546aca3e840a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:10b1c418-3e09-56cf-a8b6-4499b32d8fe0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d72dadce-7f28-5516-8e31-1232e63508e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2b611485-ba50-5a6c-9b0c-e9a8977e8d79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:17d42ed2-5722-5b36-967b-32cc037a7b5c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:66e4fd3a-9282-5b96-abf3-7d79c13afd38", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3a92b708-25d6-500f-bf05-a6d6eb5e115b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1658fd3f-0114-5f6b-b298-d7470c5784ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:23ac008b-418e-5960-9da5-d7f4204a938a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8a0d1730-2e90-5d99-a152-398caabc99f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d3248c92-fc99-58d5-b509-b3ea8bc098db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0b397b40-c107-5200-8fda-e0420ca17a67", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0da3cafd-229c-5f92-998e-16ee19a3d8cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:397ad9a2-4d65-52b5-a40f-dc250073bd0e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:845a4eee-843f-5a27-8214-02b7f776aa2d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c4e32ded-855f-5ace-a85e-6ac3a1e4a051", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f8123bd7-19b7-5bc7-8df4-86158be00403", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:91f1bd05-db79-55f5-836f-113b03302c55", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e9c1da5c-6430-5bd6-9920-bf28c00cca3f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9f4796b8-3b8b-5d4d-9d45-9c2853aa3571", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1f8b1e3d-9172-58b3-a960-06defda3b8b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:44515f3d-2dd9-5188-b5e2-490158c4a4f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:aa5b5fc3-df57-5145-8fdd-392282387d3e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3ac4afe9-8bf4-58ef-9ad3-d70a45ac63a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:631e1be0-3e15-5cb9-91b9-55c7263089d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2a431564-63a7-5f10-ad66-bfa9cc9f83ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4533dc66-443b-5e1c-9f0e-7b423450eab9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bad642ee-81cb-5aaa-bf25-1a98cf76a580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ad78bdcd-8298-581d-a6f0-22b47a821d6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:955c5723-44ff-556f-bd4e-5cd1e1bc270e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bf7727da-c005-54f5-918a-c0c1d9b0885d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6684cf03-41f8-5b2f-b74f-1cc08413e729", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-webflux." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE-tuxcare.1" } ] }