{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:343d8952-c68b-5982-a0c3-aaf47acd8934", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-framework-bom", "purl": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2", "version": "5.2.11.RELEASE-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c648c91a-deba-52aa-9e14-83d7634384e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:3008da8d-7661-5b50-8277-92cd936fb71c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f047ec91-5540-59cb-a91b-521067ef3932", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:faff76a3-9009-527a-a473-e6dc64edc43b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fa5f5aea-e7dd-53be-bcd4-3e275372074f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:9f8f5208-3b01-5bd8-9c0d-a27b38827ccc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6b8b1314-c131-5458-b264-933aa31ab838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:9fee8dfb-158e-51f2-b619-a86966dbe202", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:0a354765-7791-55b8-a40c-c14eba87bfd9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5d8324b6-8e3c-59a0-9486-553db9d420e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:80eefaa8-6991-5b05-a5b1-329fe0f106a1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:35ef2151-fa5e-517f-bf22-5a5073e3d2e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a790e1be-6494-58ad-8505-d13d1266adf1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b1dfc029-e729-5ea1-be26-a1cd623ddce9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f4cbfbc4-1b6f-5bd3-9f2e-575126f240d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6a083b9a-61f3-5d36-867f-9976a2106ef6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4f329a93-6f86-5d8e-b45f-c27240097c54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:354d0a7e-f71b-5091-9947-cfcd204b117b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:91e7a012-fbf4-5b93-a653-a872e7ee7bbf", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom. not_affected \u2014 Target version 5.2.11.RELEASE does not contain the vulnerable code pattern from CVE-2024-38820. This CVE specifically concerns improper use of .toLowerCase() without Locale.ROOT in DataBinder's disallowedFields handling, which was introduced by the CVE-2022-22968 fix. The target version predates that fix and does not perform any case conversion in setDisallowedFields() or isAllowed() methods. T...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:dfbcd179-7dd6-5f40-b4e7-50735b8875f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:75c2fa2a-8a43-504f-921c-979b992a73d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d4d884bb-0403-58b2-a429-8c0b7a81e6b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:579c2040-bc06-52ac-ab6e-88f59dfe0fac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:43d9b014-68bd-5f8b-a4c1-ec8fcab394ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:3d7c7b69-4624-521e-9050-67f31f46c9e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5dc8e226-6982-541d-99b9-e00fe8a93576", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ce188264-ff2c-54a7-96b4-4599773a2145", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:693dba10-50f6-58aa-82c6-1d06446e5ae8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:9c7d5513-f7a7-54ee-8a79-202411303e36", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4a58ac6a-f763-5ac0-bae4-1f34e7d0a18e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a2a79aa9-b2ae-517a-b4a2-a7c48b5d0249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1fc1e3a7-7168-59a5-a108-286c5bab87bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:0c37a905-a558-5a90-aba1-5ab62941717f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:0c2a2a82-79a1-5680-af1b-06c05a54155c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4c9dd2cb-d6f9-5d57-867b-e6fc9ac93010", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:828a5019-a44c-50e2-9350-7c2e1329cc5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:0b6ccc0f-e30a-5ce3-a9bb-207d89d627ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5c3aad6f-00f0-5fa5-9c8f-03abd396ed9a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2c005097-88af-5dd0-82c0-9289a89615a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:50374ff9-7db4-56e6-89a7-7e8c976b0876", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:cf4d1106-65d1-50be-b47d-539ad9aa00f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a046507f-620a-5f7b-a429-e5413df6dba4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2c7972da-2a3f-5ad9-b622-7c46ea96941d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e97a241a-2f34-59f5-9421-beb017d28f11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d3647183-9a0c-5622-a32f-785d52e38e93", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ef06fbdf-0a41-541f-a066-08f3b3706fa7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:61a2fd3a-5325-5f5f-9224-7a692808192b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6354af66-f282-5786-a004-9db48defb7c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e8d3b9ff-df20-577d-ab9e-b59610c4e72a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a8093d05-054f-5039-ac12-4bbc7dd1741d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e1ba6c3c-f747-5048-b4cb-18a6daf223ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:3829691b-7c5a-5054-8621-55a70fa33eeb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c2526a8a-2671-570c-8a37-8d75386fb2f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d135b7ad-3316-5cd5-b4e9-82436998ae4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:000406c8-4828-5b98-8adb-b8073a5ecf81", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fd8cef45-cae3-56d6-85e9-5ce477560a68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:57dc3ebf-64ad-530b-8ec9-fb779d8fc43b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f66e947e-f572-5345-a2a3-09b873e6f01d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-framework-bom." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.2.11.RELEASE-tuxcare.2" } ] }