{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:af57ebcb-1cb5-55b5-8547-fee661bd8e9b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-instrument", "purl": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1", "version": "5.3.3-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:6d868d41-173c-518c-9924-20d6c123ded4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:5b417769-b1ec-5771-90e9-2a47db8f0370", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:23185701-f5c1-59f4-b7bb-59dbd43c214d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:ed2a83c6-2a7f-59e6-bd51-c8ce4a2aa03f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:d860ecf3-c528-5d80-84cf-dfb5dc54aa33", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:b0aa8d92-f4e1-5ad4-90f5-58920423a6be", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:796f7b84-5342-599b-9a5d-cf6b5532d0d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:2f59ad70-f78f-51a7-8ad6-b55b4827d1e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:226b50f5-c70a-5b26-81e7-f7a02b18df7a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2023-20860", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:a46193d9-7515-53c5-aedd-ec8333e99491", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20860 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:1d784c08-5a99-56a6-83b9-665dbe1ab432", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:1673b66d-7d9e-53e6-8271-a9ae92c9edfa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:17c8e156-4703-5a7e-b6bf-349ca3bcdaa8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:ca63c438-3651-5eaa-a205-8cbd77662263", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:1c636fb8-edd0-53a9-9ee7-2cd51c695bd5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:303bd83c-c7c4-5990-9834-1c917a1def40", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:e168b2fb-4bbc-506d-86f5-6831197f6197", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:7b31dab9-9bd8-55b0-a7bd-523f739bc4e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:31bd70a4-266e-5ecd-8c64-a52ac5742e98", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:d1172a8e-c193-552b-8ad0-2377d3e74da7", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.3.3-tuxcare.1 of org.springframework:spring-instrument. not_affected \u2014 Version 5.3.3 is not affected by CVE-2024-38820. The vulnerability addresses locale-dependent toLowerCase() in DataBinder's disallowedFields validation (introduced by CVE-2022-22968 fix). Version 5.3.3 predates CVE-2022-22968 and uses case-sensitive field matching without any toLowerCase() operations in DataBinder. The vulnerable code pattern (locale-dependent case conversion in security-critic...", "justification": "code_not_present" } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:109a77bb-83b7-5ddd-820c-3d9593afe420", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:347945a9-8a66-5f97-b782-48b1c1ff3f87", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:90295631-847f-53e1-bb77-6d95ce384a28", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:0baeed72-c0d9-57a9-84e7-76fad2aae560", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:26f94696-f6db-5994-87a6-74af62186e9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:b5840be2-f878-5d40-ae4b-16f61ec088c3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:2a38bf68-4830-5d2b-8c70-b0fbec05e79f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:a957e495-2b63-5b4c-b244-77d20892f022", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:f8aa56db-0de1-5abf-a030-7d442be4e9ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:666290fa-6bba-57c0-999f-26522bc76ed0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:31c58d00-6a0e-5981-925d-db75d72bd053", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:9e7e08de-2f69-51b5-a98f-93060c4e4f61", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:2890f5a6-1f18-5425-8bc4-8618bf214eca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:6e804e16-00e1-54cd-9992-4dde8dd8c2f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:e7ae9619-b699-50f7-917f-d407d43667dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:bfea983e-47bc-5252-ad33-ba716dd028f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:7564f871-bdfb-50f1-8051-9d17ac6e7d48", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:4e17301f-57f6-5f5d-9166-4622f6e675a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:0c16d6d3-fb75-533a-bef4-246a05704335", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:0107badf-00c2-5bf8-ab3f-d5eefdbae348", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:d0a59fcb-de2d-5909-846d-4984aae2b6a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:ccba61be-d06e-510c-8532-375682aaa1fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:9dadabf3-7e85-5f9e-ac3d-8e8a872700a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:72632e24-9ba7-55a2-a6c6-16d816fefe9f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:9fbc95e3-b1a9-5daa-b65b-bc181ec323fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:989f0002-73f9-5354-ae7f-f853d96c549a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:6b0caa32-900e-5b34-8801-beed08a23b7d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:94dfe10e-8f37-578c-91d4-de8da874771c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:dba74877-6609-5e43-9e17-dce88b0a6686", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:52baf777-b4cb-5aa2-b726-d26d3e5612aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:b7c65313-897b-5d0d-8226-548eed769680", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:f296a71d-4930-5130-a6fe-8826c0ffcae2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:755083a0-96e3-56ec-93e2-cc3cfdecd390", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:f92c6ac9-652e-576a-b73d-3aeefeea1125", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:18606346-f08e-58a8-abae-c0d3e8d92ed8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:3b338fe7-f8e7-57c5-92b4-a5bcab00014d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:18a38166-07ab-5267-be4b-5627ff42ddf0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:aeb3d4e0-b451-5025-811f-569ce03f336e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:959500a0-4b52-51f2-9799-666057004038", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:a385b92b-a5c3-5af8-be93-70bcc7c74e32", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:72418b2e-b621-5c98-9fae-61529175cbf7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-instrument." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.3.3-tuxcare.1" } ] }