{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d061a919-ddd0-5e31-8dc7-c2a65d17f626", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-beans", "purl": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2", "version": "5.2.11.RELEASE-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:dd5ee1a8-7d3c-5d57-af31-aaa7b0620ced", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:eb39a124-573d-5a84-8e4b-dccceb62c804", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:0ec71577-a757-5ef1-b88c-0762071f2402", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:015f4837-0d53-538c-b7f9-c7bca4f44f94", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b32a187a-2708-5dfd-99e5-325a3d1f20f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:61e95291-7c8b-5dd7-b4ad-2c13d372f2c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:21ed9db6-d27b-55a4-ac66-3f4e23791bc4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:89bbbae0-0085-5fb1-9a9a-ff2c0c15b063", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a0b31c52-5f9f-5459-92c9-4a817367fff2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:262b96d0-c9ec-50d3-9302-adfd8b25a786", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d239fa4f-35d9-55d3-b028-b0fc5228823e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:11eed264-533c-5203-ab22-7b298e70e684", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ef5c77f6-6409-5d83-beef-7140de993c81", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e7c9e67e-6092-5dc5-95d7-157b9db17d98", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:49d06ba9-9036-536d-b2f4-404a29b85601", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c4a84694-e404-5479-9f36-fc3a46e5e591", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:3d14c16b-bec9-58d6-96a0-bba7748f0343", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4c480b57-beec-5776-a71e-fec3fb6feca5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:acdbf398-d6ef-5156-8d18-6dea898f29a9", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans. not_affected \u2014 Target version 5.2.11.RELEASE does not contain the vulnerable code pattern from CVE-2024-38820. This CVE specifically concerns improper use of .toLowerCase() without Locale.ROOT in DataBinder's disallowedFields handling, which was introduced by the CVE-2022-22968 fix. The target version predates that fix and does not perform any case conversion in setDisallowedFields() or isAllowed() methods. T...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:facf015f-03e0-5ab5-bf87-bc03e9f6d37d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6505ba4f-a87d-5a56-99bc-56eba0bb8312", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b6b2d006-d5b0-5585-9669-35a8ece6a93a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:9058593d-63d2-5115-b8c7-c0df9334b4d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:054d7ba6-2ed2-549b-bfa6-85a655c07554", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a4e8826a-f4f8-577f-977e-85696cb718ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:811197f6-b895-520b-9947-8f982c959986", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b33c017f-98b3-5635-bf14-a3618ce44c3d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:638da1a1-3671-57bc-a553-0733db3c3621", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e3b5c177-6a4b-5b44-b3b9-1494021aec6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c6bfac76-b2c9-56b9-aba2-b552b7ea5227", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d4dec1a5-fb4b-59d2-bd80-6d43584f670b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:104b6055-f9fd-53ea-a4c4-9ef7ba8908e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e27d62f8-4b69-5066-8202-21bd62f53946", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:61b482e0-9dc2-5baf-8c85-bc77f7fe6271", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4f494352-7534-5383-9141-b54a33de6581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5ea990fa-a438-5e34-884b-ebbeebf07fb0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7e1d8313-cfd2-5af8-b557-76fdea2ab1dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d94b6349-6f35-5775-89e5-3cbf705ca08a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:86897437-8f44-5cd0-9679-6ca507f83ab0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4ab665a6-c09c-5bfa-a25d-68a060bcef39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:0e7637fe-dcb3-5b7a-9667-f7b76b3a1561", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b0371521-faa1-5ee6-893a-df800ee9ecc3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:bc0e561f-d115-5e9b-bb83-268bab8eb915", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4a9b203e-7713-5225-a445-84eb4de00638", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d4ed1cdc-24cc-54a8-b13f-aed269499a4b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:0cbd6b16-0ac7-58ee-8d78-916dbb820c27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f38b073f-5551-5a3e-896f-3c95a7e698f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e25ac3db-e18d-5ecc-a18b-1e9c084c03ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e67ea408-6d4e-5995-8633-44c1f31e3dc2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:06600006-2868-5af2-b07d-b3c9b472444c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7c57908a-f691-5bf2-bd0d-bc3a477d992e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:967afa66-6235-5879-b687-4ae7f829b68d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:85a4f37d-85bc-5dff-a586-a7b5559b0d2c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b1fbf9ed-760e-511a-a8be-556ce7ffcc36", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:90823978-f575-5622-a796-254e1d9dc654", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:65cbe68b-b98e-5bb0-9809-ab75a9712bd8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:37dd43e1-356e-5762-bc53-7024f715274b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:14c4b38b-7bb5-58a8-b7c5-38e0a99217ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-beans." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.11.RELEASE-tuxcare.2" } ] }