{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c50bc80d-b726-5734-acf0-99ccca81fa2f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-orm", "purl": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1", "version": "5.2.10.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fda3c20b-dfcd-56c6-a25d-7ab404c37e50", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2a81305c-d4a9-582d-a8a3-fdb5dae56b7b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:844c99ab-497a-5e8c-ad74-ac5163be3839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6c7c5007-0efe-5f46-9d05-7c6469236c47", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3e671ed4-91ad-5120-88b2-6b258571e7e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:604a471a-352c-5ecd-86e6-233bc52cc353", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0339a69d-ba75-5010-9e72-9943ae3e76dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f7fae72b-74ad-5cd9-add0-471e70a9ece4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e365c00e-0091-583b-861b-b3fda5198128", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:60897ab7-c5f4-5c81-96c7-ad857ed954a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bdcfa286-9001-5a4e-829c-e09fa990801c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dc715148-8219-5b1e-96aa-6e6cd653cd4b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e626f3f3-a282-5b4d-a2e1-28be63408dd6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f6331ae0-2c19-5d62-96a6-82d833c956e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e1db384f-c549-5a68-9369-d042f4133c0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:87071fe0-1e82-516c-988c-576d9a01d59b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f0a67296-5a94-5922-aa12-2fd7ab068452", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c93daa6f-b24b-5c21-8529-2eea37cc57b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5dbc6518-e392-58ea-9293-bd3d9c499b72", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm. not_affected \u2014 Version 5.2.10.RELEASE does not contain the vulnerable code pattern described in CVE-2024-38820. This CVE specifically affects the fix for CVE-2022-22968, which introduced case-insensitive field matching using String.toLowerCase() without a Locale parameter. The target version uses case-sensitive matching and does not call toLowerCase() in its DataBinder field validation logic. Therefore, the l...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:da03dc28-f561-5544-9250-0abd7d1b8779", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cf20b6dd-b6a0-51e7-aa78-d5fed03bf5f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:39530717-b191-549d-86c1-e2122118a504", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:177bbfb9-18e5-5427-afdf-fee451f6c7a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ae6c6dbe-9e56-566f-b194-d800c8921e3e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4a1f00e1-f760-57fb-87a7-bbcb17b0570b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3ec44a04-5809-5d7d-86b9-2ba2d414a8cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f2d0c845-d1fe-57b8-8cdb-b03a70c725a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4560d29e-a7ec-532e-8b93-41ff6c3fd3b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:552314c3-c243-558b-8c85-0695dfdb60ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:747bb6c7-afaf-5764-b80a-3200ef2f9893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ba995888-4377-5a82-988d-8bf782aa2049", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm. not_affected \u2014 Version 5.2.10.RELEASE is not affected by CVE-2026-41840. The vulnerability targets the PartGenerator/MultipartParser multipart parsing implementation introduced in Spring Framework 5.3.0. Version 5.2.10 (released October 2020, before 5.3.0) uses a completely different Synchronoss-based multipart parsing architecture that does not have the vulnerable BodyToken buffering mechanism. The vulnerabl...", "justification": "code_not_present" } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e8ad3350-a8b8-5ff5-8526-759d61d7608f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dbe1e332-9169-5fb0-8258-073884efd887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1dcb7003-0973-557b-8bc5-b9c9f9f27f2c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:19840746-123b-5359-b935-b39c8fd4ffdd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:64157a46-b61c-58c7-9999-98a89a5404d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4d4e789e-1c27-5cef-a31e-7c1c9957ae1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0a6f1c98-05aa-5130-9024-b1e5831964aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1515cd90-c7fa-5b6f-ad3b-80675887f09e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e665fb14-f3b8-512c-9756-b1f6432a56b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fcc621f4-68f4-5b50-ba6e-398c9587c25f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:92bb23ac-426e-5591-88e5-f8591cbd63c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:92bf48db-8861-51cf-aa57-c3b37b03dd19", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:35858c00-f0d5-5218-b389-caa4ad35f572", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4531dc2c-d333-566c-ac54-4769c3666540", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5704bc4b-5fb9-5c5a-b17f-c40d2c20320d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4f960634-7228-5201-a83d-9e6ced1b84f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c2e4e049-4c54-5681-b7a6-c0c71e2fc3b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1fb432d7-33e0-53b5-9dcd-74339b567dc8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:46270d9a-4025-536b-a7c3-7264aa956a66", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c6cb7d23-a7ab-5864-9a42-df23b68831be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3cc5871c-c5ad-50bc-ac57-a2859d0dcd36", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3a451183-bf1d-587a-8dfd-c55ee348c03c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:552d3cbf-b2e2-54e2-9f00-986140b6655e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fb8d1481-3ffa-50df-80a4-de2b54e72c6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:caf676b5-dabb-5e02-bdd8-15d68ac2a8ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:29f4481d-af7f-5d02-8659-63d5e4e32256", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2d1188a4-5a16-56d4-aab5-e76b3138e012", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-orm." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.2.10.RELEASE-tuxcare.1" } ] }