{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3606a226-de52-5758-bdc5-6a0b0aec9bc5", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-tx", "purl": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2", "version": "5.2.11.RELEASE-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5e8b2dc8-9c32-5cb0-85ce-ad09075e1191", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ee638646-e38f-5493-b549-38dff4091658", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:80186381-c74a-5e0f-ba79-9570a40a877c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:baba7c1c-ecc0-533e-8a67-f1c603b68922", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8201a63e-5902-56d2-98f0-3836089e8a46", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:49037456-79e7-5a1e-afa4-150eec1651b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:55e2913b-a86a-5abd-a992-41d27b9bd396", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8b3592da-5aae-5e4d-9e3c-f89b544f8856", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:19b50325-82a3-538c-a54b-7afe207f194b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:73899f51-08cf-5f1a-a24f-89c7b46ec47e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a2dffe12-9d08-504b-925e-5aac517f2b8d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f24424be-7871-556a-a5d7-b555f06cec98", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d9f7813d-02a6-590a-9399-e02567bc1dc1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:390794e7-7f4c-5cc9-892a-2e8314259508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:58c493f5-164f-5383-a9ce-1a389dcaf032", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:90fb195a-a5b5-544a-8049-2202c6c65246", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:df203480-d870-5ca2-864c-5daf448fe40f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d640053b-d9c3-5aa8-9f93-f1c5ef68650c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f0f11e92-8476-5e04-987e-7db3a19b73d4", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx. not_affected \u2014 Target version 5.2.11.RELEASE does not contain the vulnerable code pattern from CVE-2024-38820. This CVE specifically concerns improper use of .toLowerCase() without Locale.ROOT in DataBinder's disallowedFields handling, which was introduced by the CVE-2022-22968 fix. The target version predates that fix and does not perform any case conversion in setDisallowedFields() or isAllowed() methods. T...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e2e1257c-7e57-50ad-bad9-cb0404822960", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ea83f865-b248-5701-bd3b-eadd6a330e91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:75ac7ca8-37ae-5618-a9a2-ce42916cd0d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e1aafe21-189d-5bfc-a196-9020d1d4a2ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:01a2698b-2a99-595a-b8b1-ed03aac22e76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a131c77b-4b8e-54e6-b669-b77211f7d315", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2d17e075-1da9-5639-ba44-0e6a45fbb888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e3e4352c-2db2-56ed-9075-ec5d77f787c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7e5324ae-f6f8-5dc3-b3b8-5369881fc791", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:be6633d2-dbee-58ae-8840-e355f5528cc1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:61ba037f-a45c-5ebf-8d38-066cc1fa4f1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e6671227-0527-5e35-af00-54ca40bb427c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:702f3b20-09c3-5909-99d9-78f22d9fce93", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f2de6f64-16f4-5852-95b0-2d121cbab179", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:979d5117-0286-58c7-87b5-6ee0cc60f1f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e2d640cf-ccc2-561d-bafe-b051a4a8001a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1c98e621-b458-56f1-b241-0cc0f4916050", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6978fda3-b60c-58d3-a690-fd9221a11a90", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8294d76e-f4ec-58d0-a20f-f5addf7b11c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:67cd8dc6-b688-575e-993a-755d72b26873", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d21e7d8b-cee6-5b18-ad6a-6af314f499b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fe53f9a4-d074-579a-9f34-7649e7669fde", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6f895e47-3713-5eea-abc1-329fb1fead97", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ef7d7e88-71ba-512b-b63b-abeb98e9e967", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:3d6282ba-2562-5529-8f84-24469193c034", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b62405e7-15c0-5482-b24c-7a8d6b5cc085", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:72ac05a6-de9e-5760-b51d-d219e57e28da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8995b633-28e2-55e9-9188-cfaea185a5d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:dcc4e3fa-207c-5269-977e-a98f1a59c4ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e6411884-5e27-5dba-acbf-7ac03080981a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:eff835ce-816d-50cd-8d27-db24c127b842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7e174006-df8d-5756-9625-6f53d681c3aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b53c791f-bcb9-5be9-9ec0-a5a653e2f209", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b70ed0d2-c6cb-56d3-a134-3ab507fc9bec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:be26184f-d4e7-5c18-9435-ac7cf90a990f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a5150331-4334-5ce6-a245-f8a2c1be5d05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:dd77ac44-320b-595c-a41c-555d7e338dff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ad2f7341-1e04-57a5-893b-680ddb2a0ec7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:355e11ae-909c-51e6-a78a-f3181cf23b7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-tx." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.2.11.RELEASE-tuxcare.2" } ] }