{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:59d79425-4fbf-5f60-9188-41b404b9dd0a", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-websocket", "purl": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1", "version": "5.2.7.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8f8aead9-7243-551c-b859-445cbee1ba2e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8db12565-b8e0-5298-8e60-c8ee364d8693", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a2458b43-f1b4-5275-a38d-92ab2d31bf86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c517d929-f47c-54e9-9168-e0ce9fd5f8d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:824d60ee-1381-5092-9e91-9839b503e84b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d43bf02e-9d97-569e-a9bc-e5df4c4618d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:67d03a2b-cbcc-521c-811c-a99b5aa8fd3f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1b557db6-5710-5599-b7b4-82da84f4cb27", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f741ede8-b516-5f86-86ab-e3d09b597fdf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b82ceb16-8caa-5d12-9b49-11370fc0771d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0385cd78-2613-557b-9bad-238cda7b729c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3d8efa58-8b5f-542d-a15c-1f2ce001c4c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e808c9b3-24e4-5e3f-8aca-1bbcc5ca782f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3e56d843-4b52-5405-a337-475ef47cf4a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e06a5705-24c7-5d86-abc1-0e917140d0b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:20006443-7f5b-51e4-812b-b5bb5dd7774d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cc419492-19da-5a2f-bd05-ce728ce7f307", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:62289143-0704-501d-8f48-98e3534b73de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:03032714-d1c9-5096-b789-8bda2dd8f626", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket. not_affected \u2014 Spring Framework 5.2.7.RELEASE is not affected by CVE-2024-38820. This CVE addresses a locale-dependent toLowerCase() issue introduced by the CVE-2022-22968 fix. The target version predates the CVE-2022-22968 fix and does not contain the vulnerable code pattern (toLowerCase() without Locale.ROOT in disallowedFields matching). The target uses case-sensitive field matching without any toLowerCase...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f579daaa-2d95-5046-b13e-095d40c5a5d5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e6ce2e7c-b026-51d0-a351-12e261eeae95", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41242 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:88374015-c26c-56be-9d1b-6accdf56f0be", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6ccce44f-e2d1-57b8-99d8-0f8fd65fbe76", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ca4ee13f-d5c0-5b52-86e2-3f3d79d685ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3c518955-f45b-5989-99a4-af88bcb705f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:843e5381-327d-56f8-96f5-87ae0fcf9d12", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ecbcd69c-f724-5dbf-ab36-f051a41af833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5e08ccee-d58c-57ff-a284-766de94802da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22745 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cd2633b8-2d1c-579e-b7b4-d0f22e58f442", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:161c2e6a-3756-58c6-a484-6220c10f282c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:17d2a1da-4288-5cd9-8f67-97fb99960286", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7faa7c8e-2310-5489-b514-9622ec3a2d20", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:012865a5-3070-5e40-a7f4-b9abc1098338", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2de300ee-560a-52bb-8ed9-eeb7845b0d53", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d10ed4e1-00e5-509b-b119-5500871ad00a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c7bbe07a-0f14-5bcc-9140-105b50c9cf2a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dcb1aa81-e30e-5215-a7c6-61bfef14a7c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ee8b57da-8c1a-5cfd-8a4d-aef32dacbaea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:69e4e4df-134e-515e-b099-af84dd63a04d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b9ab08ca-a711-5357-b2fe-011e70281677", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d831d9f9-cb7e-5172-9794-b0ccb2a198cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d0918156-2464-5018-a4cc-78d8a6a88123", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:68d38625-7921-510e-ac65-742dd0b4cc66", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e301b191-dcea-5904-8426-dbf598b78d3e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:38066344-2acf-5181-8b4d-28bd40e85577", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f39150f0-0455-53f8-871d-1c16855bef25", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:318c8765-56be-5974-a96a-86498dca0f92", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ee19a322-0060-5133-a725-d9b340d51a7c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e2538950-e122-5eb0-8a7e-872430a7a30e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8167c2c3-1227-5175-a9e8-0b31d257b206", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3067cf78-ea77-57ea-8435-4df19a469c2f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e3ca6dff-957c-5b4f-a7db-4ad3f5e6d0e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b1492e17-8b98-576c-a22e-459bdc393402", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:34edf6d6-7dd3-5340-8bb4-39a78c093397", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bb88dc92-ee3a-53d4-85a7-cd91d9a10a5e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:24b00aba-32d6-5edf-82fc-145aba55f1bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d182b21d-1874-5b5a-a2bc-c078fcfedcf7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1f3100e4-a469-511a-a2cd-3141cdcbd462", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.2.7.RELEASE-tuxcare.1" } ] }