{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:13f90632-fb01-5b29-a5ad-23bc889668f4", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context-support", "purl": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1", "version": "5.2.10.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a28556e5-a878-5591-bc5d-ba21ccc3696e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:446f3808-d938-5dfa-8df1-d09c9e05fbfe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c8814ca4-7954-5fe8-acc9-137bb1b1dd17", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:11311d48-d4e1-5eca-a1b5-8b4e66071eb4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:84298998-1546-53a0-b77c-6b1a6825e152", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:04da3a75-5931-5cae-be54-e9c5995f5514", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b3ad0fcf-3dec-5bfe-9b9f-0f5a8b4b4904", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f538df45-ff16-58fd-bca0-9f0458695674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6dbffb21-28d2-5dbf-93f9-fe26208ea59e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b189c9c8-87d5-5ef6-857b-dfd925a6eac2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:109dca63-a2f9-59a8-b577-ca267f6497a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f2c7700d-6c9c-55f9-b941-10691d95ff5b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7d750250-fb6e-5ef2-be6c-088f3a251b8e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a39b3dc5-60b0-51af-bf62-b3122f2640fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:83423233-d15b-5ec9-b1e1-5a481106b3b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a6bac311-c4f3-557f-9283-44cd91734f32", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:295d9c69-1a27-5a7e-bee8-7b8c84ab3779", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:46c2138f-5149-531a-858b-b8945538c1e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c96b4989-b2d9-5a26-be47-24e99257089c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support. not_affected \u2014 Version 5.2.10.RELEASE does not contain the vulnerable code pattern described in CVE-2024-38820. This CVE specifically affects the fix for CVE-2022-22968, which introduced case-insensitive field matching using String.toLowerCase() without a Locale parameter. The target version uses case-sensitive matching and does not call toLowerCase() in its DataBinder field validation logic. Therefore, the l...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fb7bd54a-7bfb-5d29-a06e-0822fed15055", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4f801594-ed2a-5b28-804e-009745eef13b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3c44b818-9a9b-572a-a191-28be9d098769", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5a446ac6-e0ee-5bc9-b023-7aaa7fe25c59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:656c7c11-872e-5a12-b039-9981ebbc6389", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:62065707-280d-573e-abe9-dd48c1fff2ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:708c8e40-781f-5000-933c-d2babf600bef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2619356e-ba4a-509e-907e-44b348f40c70", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d2b2f617-95c2-5894-a727-732bd2559b97", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f85d28b9-7992-5306-a75d-610b6ba12c57", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:03bacde4-4fd6-5dca-8263-e4597abdb2bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bdfa5337-5f0f-5b9e-9705-bc3ea347277a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support. not_affected \u2014 Version 5.2.10.RELEASE is not affected by CVE-2026-41840. The vulnerability targets the PartGenerator/MultipartParser multipart parsing implementation introduced in Spring Framework 5.3.0. Version 5.2.10 (released October 2020, before 5.3.0) uses a completely different Synchronoss-based multipart parsing architecture that does not have the vulnerable BodyToken buffering mechanism. The vulnerabl...", "justification": "code_not_present" } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b18c0141-5237-5958-a492-7dcfd4c761b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4f7f541e-6abb-5331-8076-e0ac5a51b8ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f9163c00-ab2f-5ccd-bf5a-8bd8e5cac033", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0c11b230-2e19-52fe-abb7-a28d7433a69e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0ef9229c-18fd-5484-a13a-9e7134870912", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:593ed5b5-3abe-5aee-8350-19fcb4facb5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9d1dede9-3b08-5219-ba8b-1b58755cc6d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f45c3cb9-5311-5f8f-8c11-fe5fabfaf753", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ec0476b2-c1ba-5dff-be83-b27491c8df42", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ec4d7e5e-7e6e-5b99-8eca-dd86ba2e2b34", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e13e9dbc-7980-52a5-afb9-d586a5a8bb50", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9b42bf6f-4def-5bb6-b365-15eed3938649", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:330ba639-64c8-560c-b6a7-32a8001bf0c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0f7162e7-779d-5754-8037-baab1e71562f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:86b866b4-067c-5597-b406-5c854f963fce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:aa521eb3-1d76-5d0e-b5e5-e0c7d3cd6eb9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5cf26910-c9a5-51e0-9b35-8ce93c15f2f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:51b2939d-c6e4-51cc-b8ba-2df22c44491d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7a5027ca-fbf2-50b9-b15e-504df16eda52", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:18384400-56c2-58e2-bab4-7f47b8f10788", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:529b904e-7427-5e1c-81b7-92648bec86d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cc669465-99e6-5c3b-bc81-b951720a0bae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d0bfac49-7b9f-5848-8d6b-7db15649c5e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:231bbe79-3c05-59b5-aed1-16081203ab7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:28e50466-c437-5f49-ae3d-f1e4580c140d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:081f5af1-4a46-5a1f-a2aa-b765ae163033", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e7a8ee2c-63ea-52a2-a6bd-4b484ce65e43", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.10.RELEASE-tuxcare.1" } ] }