{
  "@id": "urn:uuid:4d8a979d-a75f-4027-b32d-3452f248fc57",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 46,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-02T14:58:56.128088+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-context@6.1.7-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-context@6.1.7-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-10-31T00:47:37.842974+00:00",
      "status_notes": "Vulnerability CVE-2022-22968 does not affect version 6.1.7-tuxcare.2 of org.springframework:spring-context. not_affected \u2014 Spring Framework 6.1.7 is not affected by CVE-2022-22968. The vulnerability (case-sensitive disallowed field pattern matching in DataBinder) was fixed in upstream Spring Framework 5.2.21 and 5.3.19 (April 2022). Spring Framework 6.1.7, released much later, already contains this fix. The target code converts both disallowed field patterns and incoming field names to lowercase before matching, ma...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2022-22968"
      },
      "impact_statement": "not_affected \u2014 Spring Framework 6.1.7 is not affected by CVE-2022-22968. The vulnerability (case-sensitive disallowed field pattern matching in DataBinder) was fixed in upstream Spring Framework 5.2.21 and 5.3.19 (April 2022). Spring Framework 6.1.7, released much later, already contains this fix. The target code converts both disallowed field patterns and incoming field names to lowercase before matching, ma..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-context@6.1.7-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-context@6.1.7-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-30T19:19:17.541065+00:00",
      "status_notes": "Vulnerability CVE-2024-38820 affects version 6.1.7-tuxcare.2 of org.springframework:spring-context, and is fixed in 6.1.7-tuxcare.7.",
      "vulnerability": {
        "name": "CVE-2024-38820"
      },
      "action_statement": "Vulnerability CVE-2024-38820 affects version 6.1.7-tuxcare.2 of org.springframework:spring-context, and is fixed in 6.1.7-tuxcare.7."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework/spring-context@6.1.7-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework/spring-context@6.1.7-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-22233 affects version 6.1.7-tuxcare.2 of org.springframework:spring-context.",
      "vulnerability": {
        "name": "CVE-2025-22233"
      },
      "action_statement": "Vulnerability CVE-2025-22233 affects version 6.1.7-tuxcare.2 of org.springframework:spring-context."
    }
  ]
}