{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a7068f49-d462-57d9-847e-882201822623", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context", "purl": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1", "version": "5.2.10.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:07ce089f-8a86-5fd4-b090-98580790299b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4dd65655-5211-5cf4-ad06-7dae04ae680a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c900484d-1f1d-5108-8350-24ed2354bf84", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bc72dae9-b2be-5de3-89b0-98b0fca2f99f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f36d5185-91d1-57cc-9ee3-8756c78e3a36", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:164ad78c-70df-5a47-9add-d1d8c6cfd1a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e7e86542-7d5c-5fb8-ae36-c5ed88b5a4d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f8c1d5a7-2ba5-51b3-a0a9-8e530dd4f4ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b706ebf8-5752-57c6-bed0-db0a9526e2a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3c10c95f-b0f6-5a78-b42f-d2db9130e070", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:28c1fcc3-497e-5e58-a140-0aaab9875c34", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4ac1ff8b-aab9-5ae8-9fc3-14ae099536ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:568815ae-a398-5eed-b4a7-83902dc6c964", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:47b0eaf1-ce72-5611-a8ee-cd87f5c81086", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9429d330-badd-53fe-8f7e-09f247a327ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dbce7ec4-d63b-52f2-8963-295fe9867682", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8540f099-5009-5871-a7a4-98efa8b6a7ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a7dfccf5-1e6a-5a5d-aa73-8314193e1fe0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:03a07fd6-2af7-54f8-a7c0-13e304c96453", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context. not_affected \u2014 Version 5.2.10.RELEASE does not contain the vulnerable code pattern described in CVE-2024-38820. This CVE specifically affects the fix for CVE-2022-22968, which introduced case-insensitive field matching using String.toLowerCase() without a Locale parameter. The target version uses case-sensitive matching and does not call toLowerCase() in its DataBinder field validation logic. Therefore, the l...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:459e245a-d189-5361-b78d-31f23849f7bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b83b6690-2213-55d9-807e-b994eeb44edf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:986ca971-ac7f-5f74-929f-68750ee40079", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2c672140-881b-5c06-9aed-10b57e0b40bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fb054fc2-5568-5c84-a8c5-7b1e81c3938b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e898e031-ee8d-5bfc-9fc3-718af43cd46c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c68ff5cf-ede9-5c10-a29a-55864d9efa20", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f6eb0662-f869-5b63-94c7-86314b6718ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7a6f0117-752d-52ff-863d-035c8e15d09c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f6a38451-fa31-5cd2-928b-b01d84f24c98", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5741d1aa-cc1c-5a7c-ba82-0be195a98373", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3f3aae04-c65c-53a5-82b0-037ca1cbb6f7", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context. not_affected \u2014 Version 5.2.10.RELEASE is not affected by CVE-2026-41840. The vulnerability targets the PartGenerator/MultipartParser multipart parsing implementation introduced in Spring Framework 5.3.0. Version 5.2.10 (released October 2020, before 5.3.0) uses a completely different Synchronoss-based multipart parsing architecture that does not have the vulnerable BodyToken buffering mechanism. The vulnerabl...", "justification": "code_not_present" } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5b97804f-2341-557b-bc7a-d4ed98f386ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d881773e-50c6-5007-b9d0-af6ce8fcafbd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:54358a63-1332-5d63-a9a2-228a87d96d45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d9c91c5c-0001-5646-af07-0fe7afb7617a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:076f4773-55bf-5b83-970a-dc4f4b9f3b74", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:aa79fe7e-30e6-51a4-9405-9f61d5e534b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:913c80f6-e3af-52ca-8de2-2fc5898bc6c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c82a8f81-e56d-5475-90b4-1242d71adfa5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b319abc3-9396-541d-b159-be96e70beaf1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:020de3af-6fae-5e95-8af6-5261bdb3572e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a676a861-8095-5cfb-81fd-7bafd8f0b31a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5ee71297-12bd-5f11-97a3-a4e200f722d5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7d014a56-cf66-5e1f-a161-830ae4548973", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0c009ed8-dca6-5290-91b6-c2ed289f52d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:41f52a26-3608-57c8-bbf9-db731315e6d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:97a6f54a-abd9-5bd8-bc6e-4c0205eae14f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dacd3cbe-f41b-5171-a9e8-38ff34a6fc40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:14879d7f-a84e-5e32-aa8d-20ea7926cad7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:597ca62a-17a8-5f3d-b3a4-e2bad2edaf0f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:647774cf-bd75-5f66-8420-7a62cad1901e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c42f31ea-8e17-5b96-a3d0-522d3f5faa28", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2b69df81-ad86-5ed3-a4ee-ab29f6369f1f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f8a37fe1-e6dd-54b8-8ed5-af88a8dcdc08", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1622de7f-85a2-508b-87bc-917cf4e52872", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:76dbe373-730c-5ec0-872b-e6bc3f210c62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c162cf54-5103-50ef-b8bb-d59c61432a80", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:16665d7a-4141-5f36-a384-de4bbac3fc13", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.10.RELEASE-tuxcare.1" } ] }