{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:298bedac-9e5a-57c8-b381-a9669aca7e29", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context", "purl": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1", "version": "5.2.8.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2adefb61-51f3-5dbe-9bcc-e30ad3400618", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:eebd7d5c-cc04-5a6d-b301-88cd67d3ab8f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b4951d90-5fc7-5c71-a50e-4c1c2a22f6eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:deb94030-f4e0-538b-a464-a1130f56aa80", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ecadbea3-ee39-5fd1-87e9-7db25973b1f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cc427667-f83e-592c-b41d-6b0849481769", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f27f8288-1eac-5092-bddb-d2534b669fed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:90a8e466-39cd-53d1-be17-c5a9e414912e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e2ceda08-bb90-5841-924d-c63c0dbaaf92", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bd0a5b6c-f4ba-57f2-8f19-fc5a6d3e39ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cb098507-21a6-5071-a7df-2c35fd2310a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d994aa9a-d0e1-573a-8459-bbe4bcbd10e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:132d4f2f-f01c-5169-9b4a-ba7d4be3a696", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9d609a94-3677-5d52-aa6c-e5f55b06edd6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:77270281-0ad8-5115-ad6d-c17f1b277c7a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:05bee547-7e01-5729-abf2-64f776cb1a83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:681d934a-dc43-50c1-bb01-feb2408b1433", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e0a32ba8-712d-5a1e-bba0-241f2ae010de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:537e2a73-7d63-5c1e-a68f-42f41696b468", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:558753b8-9cd9-57ec-8a39-fcd52c8b18f2", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context. not_affected \u2014 Spring Framework 5.2.8.RELEASE is not affected by CVE-2024-38820. The vulnerability requires locale-dependent toLowerCase() usage in DataBinder's disallowedFields matching, a code pattern introduced by the CVE-2022-22968 fix in later versions (5.2.13+, 5.3.x+). Version 5.2.8.RELEASE (July 2020) predates that fix and uses case-sensitive direct matching without any toLowerCase() calls. The vulner...", "justification": "code_not_reachable" } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:379e12c4-c49d-5b66-a228-bee279113344", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c4871b50-09f0-5a23-9be2-01f0a3e1b61e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7a4933ba-d50a-5353-8c8b-876df49fd628", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context. not_affected \u2014 Version 5.2.8.RELEASE is not affected by CVE-2025-41234. The vulnerable code pattern (PRINTABLE BitSet without double-quote encoding) was introduced in version 6.0+ on Feb 1, 2023, approximately 2.5 years after 5.2.8.RELEASE was released (July 21, 2020). In 5.2.8, when using non-ASCII charsets, only the filename* parameter is output, and double-quotes are automatically percent-encoded because t...", "justification": "code_not_present" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a584f40c-8dd4-52c1-9f21-d211d63a36f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:465045e0-0a54-5a98-bdd0-12876f6fb8f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4c5e86ca-40e5-5014-babf-af17e2657625", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9fd752c8-b370-5efe-b39f-3c4aea209aa4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dd888039-ee0d-5676-a607-7869a17eadd3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e22670d8-ecbf-5ff6-8a57-6e685e57088c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7d22214f-8d6b-535a-b9eb-bfbcb2e564b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f718b9a5-7a75-5d2d-b421-bd138b1cc176", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d925779d-69ae-546a-8c0a-24e237ac2108", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:14d627ea-2d27-517b-b1ee-6c64d71e39df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:aefd4a94-9b66-5189-9996-c7e89d8399fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:941ec34e-8caa-50c5-96d6-123da3dd1c74", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:23ca06a7-e668-5304-8381-e11a3006d28a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7f55acc7-48c5-5dc4-95fa-27e44e5230bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:203577ba-0db6-5f19-8b82-f09c81d657e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2565ab54-945f-52e0-8fbc-ae8e0d5085ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:48339632-660c-52cc-8534-ff4d988c052f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:66152dfe-9b9c-5afe-9e66-37339baa5846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:61c19921-389b-5735-95fe-5c0e4d3692dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:78da4402-4719-5c61-907a-3f4aa578faa4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a7e8a0f2-01c6-53af-83ee-bb735fa2d4f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a7e5690a-3564-56f0-9f8f-31a303eb648e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:52811c9b-08d6-58f4-b51c-25cafd04bea3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:33c74a51-2c92-580f-bbb8-9b22e2eb191e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:93403cfb-1047-5212-b5b5-df60d111c0f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:28f6bdda-5393-52e2-bb7f-02466af76e53", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7ce0a19d-192b-556d-8687-45492a830bc7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ae49d981-fe42-501d-939f-b774139d9331", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0624f21c-611c-5a0d-b2aa-e592740e46d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8f23b9ed-af89-5aad-b856-efdf4be40548", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6bd1ecff-0952-5fca-b285-6257c41310d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3e8e4946-12bf-5404-ae78-527f79c7f1f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4ac98978-3e5b-5c98-b405-c50e5d535ca8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:529a54a7-ca49-5934-8e0c-bae28268cfd7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0994ea85-a8b5-5c7e-8717-f066d8232901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3b37e3c2-0d5d-5892-9741-17d5c24b5345", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:87d999c3-8d5d-5599-9a47-56e85f587651", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:535d81e3-4657-5f07-8235-61dfee7ffc07", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-context." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.8.RELEASE-tuxcare.1" } ] }