{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9d3ac346-3f4a-53d9-90a5-b5a4af81ecc7", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context", "purl": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1", "version": "5.2.9.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cece5ce3-f26d-5449-93f4-473f68bc1bf1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:33d679da-dd66-5e92-ac4a-1fe4c65bca2d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e75a7902-11bc-58a3-94e4-0eaa9be7fb51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8c4d0a53-5db2-5317-b087-075bcb762d93", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8e7b932c-12dc-587c-9dd6-c2a90bb44501", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:921d3268-adde-5a9c-9759-384c2cdf219a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3b644dc4-6c6c-52e4-aa0c-701ea2625ddc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2a8cf77b-3eaf-5716-8afc-afb12e70c848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9e9320ae-cee5-5808-b65d-54799a614938", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:615a00e6-e819-59e0-98dc-afaafb8fba1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5a003634-9cb5-519d-b170-ccda9c4e25b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:aa7bbadc-6a87-50b9-98a9-045a229d25af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:01e4cb7c-ffbf-5019-833a-54c34e7c01c2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d98401e5-e80c-5769-b8d1-ecdbe649c24c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d7c5730a-25b2-5618-ad7a-cce3791fa4fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:198fd3bd-3711-5166-9038-ba4276d3c10c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3ade247a-e365-5ef9-975a-2558ecc085f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0380e9d4-7fe5-58bd-b743-4911f2b1ed65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cfa5bc7a-3188-59eb-b787-99750f1fb04f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context. not_affected \u2014 Spring Framework 5.2.9.RELEASE is not affected by CVE-2024-38820 because it lacks the vulnerable code pattern. CVE-2024-38820 fixes a locale-dependent case conversion bug in DataBinder's disallowedFields validation that was introduced by CVE-2022-22968. Version 5.2.9.RELEASE never received the CVE-2022-22968 fix, so it still uses case-SENSITIVE field matching (no toLowerCase calls) in DataBinde...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:24bf7c62-cd4d-5c72-b222-e1c4e78efe30", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:92698f70-586f-58db-9b64-78d4c233d30f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7cce5f7c-998c-54b0-bcdd-859933101912", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e2778527-9191-5be9-82f7-cb54901cd1dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0491d18a-87ce-5b15-8602-7ac89521ed13", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:94ae0344-cc71-5f1f-9de2-ff4d9a2f15ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b46315d3-674e-5854-9226-d08f1d788552", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0bb5f870-ac1f-5cf7-9f43-e021580d4e68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2d810cdd-dd85-5108-97e1-a8c20e92def7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fae928fe-1ad4-51e0-81fc-737aafc90786", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e308b1a0-e285-579a-a367-2b07560bb9e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d2045dde-179c-5fa1-a259-f168c37bf1c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:59410508-c190-501b-8fb4-2cd2c87167ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5dac48b2-a450-5759-973d-208c7a179054", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:27c6833c-2eac-53d1-abe5-51ef0d1c8a7b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b4625800-4e4f-51b5-a7d3-5e6b57176072", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b80a3e21-ac0e-591b-a670-778c6faefdd1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4efb04fd-68ec-588f-961d-6feaacb23e3f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:20988ce4-6277-5631-8e47-262f83ca06ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:83fa622c-3bfa-50c7-a772-f0dbfb2482f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:67d7c84c-0efb-5e2f-9d32-ada68995d75e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6cb8c4f9-2484-5e47-8c9c-f0e48022175a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2b9d8502-8937-5ad4-82d5-e724199698f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e4ea20d9-69a1-5b1d-ad7e-81e7a6aff59a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:65aabedf-7584-5ff5-9bd6-9a7444dce4bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3827ec7f-2a7f-535e-aff6-15a5f909a8fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7772024c-afe7-562e-b94d-3fb51284716c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:606ac170-ce29-5c64-aa13-a0ce21226ea7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:963308fd-246a-5cb1-9924-a51f87cd7070", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a1ba3a9f-a8f3-54ec-bc2f-12be312e448b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:573df4aa-3541-5f7e-85f4-52cb720146fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:493025a3-0ad4-54d7-9f42-15d11fe6d15a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cc5e8a05-78e3-5539-85e8-7d7b70e68a6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:67ec3c2a-7d47-523d-8865-29d410f29be9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e5579e84-c1ae-5e50-903d-7a5cc6ca73aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:81cf5598-972c-5d7e-a02a-1cc28fd2e40a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0808e855-95cd-5d79-b49e-d1a0ca72d9b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b6db57c4-50bd-5711-9a65-3e9df8e04bcf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:51db689b-1b3d-55b0-9358-1d2aad2833fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-context." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context@5.2.9.RELEASE-tuxcare.1" } ] }