{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:af9d80d7-4951-5766-810c-193449569f20", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-beans", "purl": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1", "version": "5.3.3-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:5ccd084b-9a27-50c8-81a8-e28b12f82a9b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:5d3accb7-6f54-583e-9236-8bc4ed271d08", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:872d2726-9db0-5de8-aed0-8f2b623c8487", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:1c791419-b696-5c2a-a626-f0beb1602ba2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:8b6a4803-7f42-53a7-bbde-43ab0c7bfefc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:b3278fb3-b017-5e3e-8f9c-8ed3877919c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:d92e4cec-add2-539f-ba36-0b35acec1abe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:ed52c982-e90b-51d2-b076-221b83e458c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:0e5d68c4-c81a-5383-b7b1-c33c802b9b2f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2023-20860", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:46192683-53ed-56a8-b2db-6ebe86c3f536", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20860 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:ca9949f7-a28e-50c6-9182-be46506922a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:70156a97-8bf1-554d-b435-73a723b84fda", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:d8d0bf39-4052-5f5e-93a8-7da12f2ef74f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:94dd0e26-7f86-5161-b338-9e97d8c3d455", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:0ca9b3e4-e3a3-5018-a948-d24a7fdcbf20", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:f8358740-cd9b-5d8f-95db-66f51f31cb64", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:e810b108-35ef-526c-9f8b-e62da7492015", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:381cc631-10aa-59ae-8624-57fc50ba80c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:3e4a0082-6e26-52cc-8aa0-2059104f7340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:c70ae9ee-2623-5944-9cbd-ee3f30e8a0bd", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.3.3-tuxcare.1 of org.springframework:spring-beans. not_affected \u2014 Version 5.3.3 is not affected by CVE-2024-38820. The vulnerability addresses locale-dependent toLowerCase() in DataBinder's disallowedFields validation (introduced by CVE-2022-22968 fix). Version 5.3.3 predates CVE-2022-22968 and uses case-sensitive field matching without any toLowerCase() operations in DataBinder. The vulnerable code pattern (locale-dependent case conversion in security-critic...", "justification": "code_not_present" } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:0e43efd2-dad4-5dd0-99cd-442c4d5b4255", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:fa38b3a3-1bdf-5b05-997c-4fe866e365d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:0745eff6-03e3-5982-bf91-e2d04c96142a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:4ddf992d-27cb-54a9-9803-fc3cefe4d9c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:79c4c005-b0d2-53bb-a703-54a5c5e7e625", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:a2cc09e7-654b-5212-bfe9-de86963c13fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:e3c06f5c-04d6-5714-a6c2-1141fb8dc5a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:251def16-734a-50b7-8bf7-94a6a073509f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:3598f19a-b8f3-5b17-a28e-1dced359e9a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:decb87b0-62b2-5482-93c7-3a0d0cd0c647", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:0b9c8aac-fee9-5ef7-8da0-8f5dc7e3f8c2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:3b94bb27-4f1d-5670-8933-be275dc0571e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:54076559-2e49-5bad-ab0b-54f7abf9fe11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:247be51a-40b7-52ee-825f-1880189005fd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:93b62e88-c1c6-5eb6-bbf2-a8adc67237de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:56798be3-0209-5548-88a5-55f31b736680", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:579eaff9-6fc1-5e7f-93f8-e789e0fe0452", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:6398e0f4-eb98-52eb-98c4-002f02715c79", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:4d50ccdd-4e96-5351-9306-5edf666ab1e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:8a25a907-6d83-5433-a493-25ce6316fde8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:2b53ea9b-a19d-5050-aaad-2869cfa31986", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:f84027f3-ad7f-5401-b8c6-778f7e5ce102", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:2beb20d7-20f8-5409-96ab-0d4ec08214f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:c106be72-65d7-5722-bfeb-390191d971fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:edc93940-0bd0-589c-ac68-15aece03053a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:fed075b3-a528-56d7-8e9b-5c46bf3ca243", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:cb98b1c1-d569-550f-b236-76385cfad505", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:9b24e2f3-84ad-5869-a615-ac040c692b45", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:c2d05acb-6230-55d5-bfd0-05c51d247565", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:3cb87de8-ccd9-5dea-84df-5a9f03101cbf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:b71f8566-b892-566c-8829-a56ab01b872c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:a9aab97f-f65b-5122-ba4c-7f5eedb225ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:bc2566f6-7f05-5b12-b0a4-e2d607744260", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:302152aa-22f8-505c-9f3c-e2e6821f7e6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:60be9038-8e53-5cb1-99c6-21152469fd0c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:3c27a4b8-e470-5e78-835e-2c17c9d6cad6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:afeaac16-49eb-5a6c-80c6-bc170a65a697", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:0e104680-3fdf-5806-b7ad-6ceffba823eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:632373c6-3e5d-5732-b206-519ec6e77f4f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:a5acf0f7-712a-5457-853f-17dd8c17ea22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:96d8691d-77a2-52f8-9614-1a5c0785d5ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-beans." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.3-tuxcare.1" } ] }