{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f75927cc-6cda-50a6-9f9b-56c3e3d36280", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-beans", "purl": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1", "version": "5.2.9.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a2bd0645-da91-5050-be8c-823e46dd1511", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:756ccc10-2f4a-51e8-bf8b-379a4802f214", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:09653633-aa46-5a28-a1e7-1dee40e74009", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f684b607-b7d4-55a7-959e-1ec7b57b2e84", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2e152041-a342-559d-a550-fe0abd8c24f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fa9ca597-62ff-5123-91d2-dba8cda7df82", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:03dc7ade-2252-57f4-a267-27d9e0da6dfb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:83b27eae-7c8f-572a-b06c-2c55434fdc6c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4dc0cce7-e811-5414-adda-62e0df1e46d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:24a31bd6-3bef-525e-b52a-930589b62584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d1c4ea44-235f-5487-b8c1-791c8b341773", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:85bdcfc6-b901-5eb8-bf05-a9dfcf54233e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ba0947a1-864e-50eb-bebb-f386acc15949", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:491f286d-57cb-54c7-942b-8feacbe7185b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:659c2c87-fd70-5673-b5c6-264e7c7898aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:643db96f-e02f-595a-a259-4d2a5f20ece7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d632b4a7-1f02-5efb-8b8c-c0aaf260751f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dc97aa58-1ee3-577e-8927-acb0f08ef6be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3ddf866a-22a9-5d47-8d6e-ce31e6fa58e4", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans. not_affected \u2014 Spring Framework 5.2.9.RELEASE is not affected by CVE-2024-38820 because it lacks the vulnerable code pattern. CVE-2024-38820 fixes a locale-dependent case conversion bug in DataBinder's disallowedFields validation that was introduced by CVE-2022-22968. Version 5.2.9.RELEASE never received the CVE-2022-22968 fix, so it still uses case-SENSITIVE field matching (no toLowerCase calls) in DataBinde...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c791059b-eb77-5ed4-a52a-0318751f39af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f590d0c5-deb4-5e7c-bf64-f5705bb30f97", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8c2cdb3e-3f12-5a37-b1f0-aec691d623a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e6355c8b-70bf-50a1-871f-a36cb3485770", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b158afed-ba63-5fbd-b77a-1f45fd50323d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1bf1e1eb-47a9-5262-b1aa-431974bf9eff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:68b784ab-c99c-51d2-b68c-720ecbebe7ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6f76ddf6-8b01-5097-91bb-26fe11e83424", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4210d23e-bc0d-5c6e-837c-431a0a2d3480", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:48d40c27-34b6-558f-8f4a-98bb002940eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1732804c-1066-5f71-8f23-878eea563ebe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:51c10f82-3b9a-5969-a6a3-e902b174d7f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5817df5b-1f1d-5987-b5a2-8d2685bb26ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7fe7253a-1409-56d9-845e-9905d36d80c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1b1aaece-fa3b-540b-8a64-eb26943042ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4510bdd8-3eb5-5295-9299-f23c0ded8c65", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:60b4b7e2-d870-5290-8f88-7f2758f27176", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0ef0c73f-f2e8-5b5f-ab05-b1d69a39edd1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3736a1c9-9023-5dfd-a23d-96e753ca8bd0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:91fbd4a8-0ffe-5100-a6a9-6d5d3c6c70a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6d02c262-745f-5452-9bc3-fa80cf8231af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:77926ce8-bed2-550d-a51d-b5814b9c0048", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:16fdb56c-5401-5470-93e7-d1e2d8978a26", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f30bdd22-6e9d-5b34-bf65-a1efa962eebb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:899f8303-6910-5ae0-9da6-22d63b410006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d342f42c-2cec-50d6-a2a1-ae7d0721bad8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7c5841ae-ff08-51d6-91f5-79de61c11299", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4d9cb09f-82ab-5a4b-87c8-336100627fad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:108b9a4e-6fb4-5bd7-ad4d-1f15f9e0eeae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:641cf95e-d283-5915-bcfc-580375215bf6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9641478d-e664-5e42-9494-c554de984211", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ea727cb8-7fce-50fb-b2f4-22750fb89980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:95510b53-277f-5520-a67e-a84e5a7f9aea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:021e8a3c-2b40-51a5-bc5e-5ec5e253317d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d409f62d-236d-5fd0-b91c-3361a3abd154", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8296ef3d-3dce-5dca-aeff-dd672bbc0206", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ee2604d2-753e-57d9-baa8-9d510fae47b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:da20cc27-eb69-5c2d-9ecb-f61f46977c2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7a4560cb-0853-5b29-99ad-020f7a8a71fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-beans." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.2.9.RELEASE-tuxcare.1" } ] }