{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:237f639f-e1b1-5dbb-805e-085e74459532", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-web", "purl": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1", "version": "5.2.10.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2a80c439-0bc9-59a4-a60f-2b9fef1cccca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:89213cf5-e193-5d10-9b48-5677a0861911", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f2576cf1-106f-5ebc-9a18-68900dd1e767", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4267ba64-e0df-57a8-80ff-2a76741bee76", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:96be9306-8637-545f-a07c-81b7f5fd0371", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dba6b3c3-2a0c-5a38-a435-d9421188793e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:703f6b8b-5fb7-579f-893e-db2db4bc8639", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:07709a39-c705-5fcc-8203-821febfb6f42", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8f90eb51-7f40-57f0-9712-ea9c201433d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:82e740ca-c0f7-5a06-bfba-87133aac92c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:48ad0f55-21dd-556e-ab49-3aea554ff399", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a954eada-41c9-5443-94e0-d48f56595fc8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:14f157f3-f442-55a1-8c2a-c6afa2b93505", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:67e254b9-38bf-590a-bf1e-5fbc7cf8c9da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b3af0d21-57cd-5856-8314-445cb56f94ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9da94d6b-933a-5567-841c-d9d8003e7b1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2576f7b1-1351-582e-9815-4ef655e97ac8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6db0157d-dd78-5feb-a08d-fa1277cb9aa6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d03bb62a-0b4e-5c05-abc7-81def831a2db", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web. not_affected \u2014 Version 5.2.10.RELEASE does not contain the vulnerable code pattern described in CVE-2024-38820. This CVE specifically affects the fix for CVE-2022-22968, which introduced case-insensitive field matching using String.toLowerCase() without a Locale parameter. The target version uses case-sensitive matching and does not call toLowerCase() in its DataBinder field validation logic. Therefore, the l...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:25192d51-8b39-5751-b8d3-3b1416c185fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:872b7be8-1ea0-5982-b866-2d66c40e90a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:08e74270-de33-5e58-8b20-77fee5faae63", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:97385d45-13d6-5c2a-9afb-8ab7bb72ad43", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9cd1acb1-e0f3-5945-8589-111fb1cea8ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e010429d-aaa2-556a-91d1-71498a892e37", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f31373b3-5276-5181-b09e-8959935dcfbd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1559ba14-9c28-543b-80c2-e2bdd01acbd1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:73bf1956-b0ba-5279-975e-e9b38218a08b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:76a87b25-9180-5f76-8401-d117216969fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ef258d0c-38a6-5a58-954b-b28a54b883a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6dde4e50-aece-527f-b134-bfcda5cc49b4", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web. not_affected \u2014 Version 5.2.10.RELEASE is not affected by CVE-2026-41840. The vulnerability targets the PartGenerator/MultipartParser multipart parsing implementation introduced in Spring Framework 5.3.0. Version 5.2.10 (released October 2020, before 5.3.0) uses a completely different Synchronoss-based multipart parsing architecture that does not have the vulnerable BodyToken buffering mechanism. The vulnerabl...", "justification": "code_not_present" } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:40d612bb-8333-53bd-a7ae-00a2e36382c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0efa268e-7f57-5989-ab2e-2d52b1a66519", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c5548b9b-04c0-52ed-a943-4b31465f405f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2d994cb5-3185-5540-8dc7-cbde0b57b24f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8a6f03cf-e065-5e2a-bfe9-5ee59aa2f8d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:383d1a5b-80a6-5788-b200-58b6ee26f8d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:664264dd-610e-58f7-a3b0-2f960b5b8254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f4a7d505-13bf-540a-a719-e8a61000d71f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:aca43b26-c38a-5f8e-b93d-2cf1b0adb770", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:999cc6c7-e3af-59c0-ad39-4fe35fd419ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:431e4e1e-8af1-58f1-90bf-69eedc7fa11f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5bda163e-1db1-5342-bd5b-3ba9f2b4744c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1f4ee10d-8057-5872-89fe-4ee37d54a437", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:af7188ff-be75-5595-9780-5abefdb25299", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:69174ed8-59bc-5f26-a79b-59faffe0b975", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7ff593a4-99b1-5d0e-a2b8-369796b11780", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e42df4e2-45c9-572a-b8a2-894e32c8e7b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ed14bec7-4857-5188-9d73-d91a4fd68230", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:208237c0-e278-5fe2-841d-6094a50a1845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e88a79d6-3d27-575d-a234-25a4e111746d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ba71878a-f1a9-5d45-8260-00d61a8412fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:de960aed-dcf6-53a8-95d9-e1ceefadc848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9788febd-f814-5bdc-b04d-f88406ad2289", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a67944e0-f962-508c-9deb-82f5acc30e57", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cda3267a-99fe-5cbe-b2ac-94d8d5a141c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8895c3db-94bf-5e64-9a70-7fc905ef5937", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2511c4fd-f884-52c1-9b85-c8ed972cfad7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-web." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-web@5.2.10.RELEASE-tuxcare.1" } ] }