{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ad1f1d7e-80a1-53f5-9764-230ea223acfe", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-test", "purl": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4", "version": "5.1.5.RELEASE-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:1b10996d-9dff-5251-9b21-91d111f965b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:8e2bb989-0625-5bf4-8d53-6b1c61d0a16b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:0dc4ccfd-721c-5cdb-bc54-130182a3800c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:0a2f5891-3cce-5ceb-90fb-ab3a6a3fe3b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:421baeeb-aa21-5a64-b260-97a2f6f4c3ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:fd84f5a2-9a4d-5576-b67f-227a2549b034", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e0ced60e-6ca2-5f62-a62c-1ef97a8431be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:137f8737-2ddc-5930-8806-b970f80b9a7c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:025c8a0b-cd31-5b1c-bff5-c18b16c6e712", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f328c35f-0d14-5293-8b63-948ce2ecc633", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:3bedb23f-7fd2-5c6f-bc9f-d47d8cd7e07b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c05468b5-d7da-552d-b218-ff4c176f5848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a85bb4db-58ff-529c-9275-2625865b08cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:cea9493f-4feb-5bdf-83e8-6f04b6522fd8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ec67ea85-59d9-5ccf-959c-d3be546ef4dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ce49c328-e843-5d48-a740-75812e052cea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e9383b8f-16fb-5ae8-ad1c-cbee7bd910f5", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-test 5.1.5.RELEASE-tuxcare.4." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:322c7f70-fd96-5788-8212-56dc5c2d6244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:dcf2a3cb-24fa-59cb-8cfb-ba7d0d4e324f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:65eaa407-0f59-5d26-af31-5220bb730fef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:978d0e00-1a7f-5cd3-842b-6d42d30c16dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c9614288-5f96-5115-bb0a-1bb2114f24d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f69f550e-570a-5a09-b90e-676ea404a9ab", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test. not_affected \u2014 Spring Framework 5.1.5.RELEASE is not affected by CVE-2025-41234. The vulnerability exists in 6.x versions where Q-encoded filename parameters fail to encode double-quotes, allowing header injection. Version 5.1.5 uses a different architecture that only outputs RFC5987-encoded filename* parameters (not Q-encoded filename parameters), and RFC5987 encoding properly percent-encodes double-quotes a...", "justification": "code_not_reachable" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c2562b47-a279-5335-8fd9-e42aefb0696b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e08e8d22-9445-5ce3-a223-1653dbf8c069", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e4943b1c-6ff3-5983-81f3-251812e0824d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:cdd25872-da04-5dc6-8229-e5f951517f84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:9b757fb1-e3e9-5d63-b98f-e5201c58a66e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:7689a838-ccd4-573d-a7a0-372814f528e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:b7cd398e-8b2d-5eeb-a036-84586241ba40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:594943ca-4b1f-570d-8933-05be36cc5f08", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:22a58f69-4533-53f8-b50b-d1667e414ea1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:3e7aa90c-e124-5a95-9f7b-bf4e897e2770", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:b1cdb85f-47f0-52f0-86de-8b1d17fde9cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:eadfa6e8-a7be-561f-bdfb-5f3f78236126", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:01fe32fd-102c-581e-a537-059598da66fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:d56dde54-bca9-5a66-86b1-3ad10287571d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6679dffa-6f2f-5770-af3f-8f6ed8a0f019", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:802e04c7-7e76-587a-b54e-c313b251309c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:46a837e3-47e8-5efb-bdbe-e7782d6ff6f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f40fe581-1aa7-548a-b18a-2a5f329b1636", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test. Spring Framework 5.1.5.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and does not contain the vulnerable RouterFunctionDsl.filter API." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:277b8fc8-31b9-5be2-a170-e5473f89aa0f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:81426a18-30d3-5575-8d59-0eb9fb8f47fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a2d69d8e-3e06-5312-81b2-46d8437282e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:831ed543-a69a-54c4-916b-f789cd8d33ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:05a2ac89-8756-5799-bd85-31f4c9a79b2a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:df9b4215-e30b-54bc-9111-66632397f6eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5ac5ee2f-1c95-5b71-ae71-a561955d1cc4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:8be8b7af-afed-564a-a269-d9c2dfc2b77c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5b43d8c5-6c99-596b-96ba-3d03dbd8b4ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ca74708b-6ddf-5556-a1c0-044ee5194d79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:1f8dd2ba-3e55-5b93-a999-24f92e31ea94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e2c092b8-9556-576a-8eec-737d6b547393", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5a68c68c-6587-5725-8494-e7a4eb2e83a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e73abeed-0842-5543-a393-d523d568bfa7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:df32a96e-df78-5954-8e0e-3dad03738dbb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:fe251e38-3c3e-5fe8-b274-ae69be202c03", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ede4f5e1-f893-5051-9e97-09ba02974ddf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:2884bfbf-2119-5384-a6e3-76cb0a76e50d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-test." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.5.RELEASE-tuxcare.4" } ] }