{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:20560215-cf0d-530d-91eb-ee9fc9da7289", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-beans", "purl": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1", "version": "5.2.10.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3877b5a0-be4f-56ca-8c3b-3ed1def3755b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fa31536a-2867-57da-aec4-f1e8e9c992ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:096ba760-a73a-5bf4-a728-ddf7a6d98546", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b3a4ff39-3d3b-5e36-82db-3bb046436b86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2006beff-ec60-5839-a472-b5e1651afda5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c3f9c7f7-756a-5d8e-94be-406ea4d30348", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dd4efad8-b6e0-5c17-bdc5-16c035b81a44", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b3fa2841-1585-5c7a-b742-3ef69024ec9a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8e0e74be-a7de-545a-a43b-42815931e19f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0e6ddd75-b774-5b5d-bbc2-a4482f874f9e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8794e837-f38c-5e4d-b606-e2a9e66dc569", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b0f8618d-cd1e-587b-b8b6-fcdf5d2f9398", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8286288a-0639-53d8-b0cb-cd8a485b3a65", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6485842e-1a23-59a4-a797-2cb3025b1f1c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:aeab0ee8-1d92-5717-b9e4-871be986af82", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a838adb5-bc81-552c-b32d-a835cfa07311", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:21021e01-7a8a-5cdd-b119-928dbbf25d53", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:18d1b942-58a2-5785-8feb-ac6019aad51b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:56a0a7ea-e29d-5252-af65-45ba017a8f37", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans. not_affected \u2014 Version 5.2.10.RELEASE does not contain the vulnerable code pattern described in CVE-2024-38820. This CVE specifically affects the fix for CVE-2022-22968, which introduced case-insensitive field matching using String.toLowerCase() without a Locale parameter. The target version uses case-sensitive matching and does not call toLowerCase() in its DataBinder field validation logic. Therefore, the l...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c8e08b51-84d3-518e-953e-9f5cebee7cd2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:87841091-07ed-5c08-95d8-3721a440637b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5d5ba6b7-165a-57b1-ba01-84e555f476b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d83dc3ae-7b1d-5f54-a716-e4daf52cd72d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7f5d92f9-720b-5128-9073-cd057eab4b3d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2704a52c-7214-50b8-b33f-74c5de17a14b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2c5bee78-516c-51cc-9fa3-76cc45e9949b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c8eb4af8-7234-5cb1-ab49-d4ad3c5678cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2917c337-eeae-5137-b871-0b67f6edfe2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9b8571fc-4174-5e04-90e3-26cb07588247", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3d905cb5-c137-51b8-bba3-97c1d1d8e921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:16431685-8314-553c-9997-7cd8fe2c6aab", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans. not_affected \u2014 Version 5.2.10.RELEASE is not affected by CVE-2026-41840. The vulnerability targets the PartGenerator/MultipartParser multipart parsing implementation introduced in Spring Framework 5.3.0. Version 5.2.10 (released October 2020, before 5.3.0) uses a completely different Synchronoss-based multipart parsing architecture that does not have the vulnerable BodyToken buffering mechanism. The vulnerabl...", "justification": "code_not_present" } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1a357ef9-67ec-5e81-8ff0-4f79a76bef53", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:86491423-0087-5c8d-87cc-519806303b57", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2ce74a23-527f-5927-a58a-ee2ddca9813a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:115b53c7-fc87-501e-bdee-1c95f07c8042", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:37b7e6d0-6fc1-5947-bf3f-ef1509d636cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f9fec016-cb6d-5785-9ded-4e1ca9d53182", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5369f1c8-f4b0-557d-93ec-446c4303a24b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ba20a3d3-df83-5697-b111-912fc05b5f1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:00361b20-e3e5-5091-97a8-28af5e6e16f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:32e42431-0314-52d8-aa12-95da1b94cbb8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7bb9914d-9126-5273-9319-84685da5dae3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6955ada2-5179-519d-9401-2da56bc18bcf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:49853976-4026-5044-bd36-4459ba6179a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fd34111b-2fab-55ae-a602-bd5a6a4fae8e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8af6e9ac-85cd-5f89-b614-647e05b3c019", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:34959c69-9e13-502e-b286-39e5688a675e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8b5898dc-d566-57af-ae16-c31743721493", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:066046b9-9fc5-520c-a2a3-1a10dbd6614d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8ca1b086-f286-5dab-8be5-d5a6be73b45f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:470a6713-fd53-508c-a07f-10c26ca032b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bd649053-0090-5481-b46b-44a3415d67e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:508ad59b-78b0-50a0-a399-d7cd28eb9fec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:318753f0-a6ae-53f0-bef8-69cb3bcff4b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fe05f68c-3a35-59f3-a9e3-bb0ca5da3ff2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:08607e2c-b3ed-5b96-9ef1-5a8dd8df14f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:373d6eb2-e591-5b0c-9bcf-44139695c0f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e68f3716-9485-528d-a0b5-8975819cb071", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-beans." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.10.RELEASE-tuxcare.1" } ] }