{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:12fcdf01-b310-5c4d-bf3d-a04c4a1903e4", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-webmvc", "purl": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2", "version": "5.2.11.RELEASE-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4611239a-d92a-5a69-9380-b06ccc9cdd97", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:3a669e29-b54f-53fe-bcfa-daffe4f6ce14", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:144b4048-26d2-5420-8204-2409a322e68f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5e4a0632-3b70-5c00-b54e-4c0d0c742b83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:aef74fdf-1744-5ff2-87c9-1af8b9dde197", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:76f82b7f-9d52-522d-8990-197462f82807", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c42910ce-c486-5108-9393-346119958f65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e1a91dac-24fe-56cd-a3c4-651236709488", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:dd4c442a-8677-5b9b-8156-bded708704b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6f0457b6-211c-5ce1-8f16-a840e71d8da2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:49272f61-9acc-5c7a-a02e-24cd1d57dc5c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:72d31222-8542-543d-9fc5-e6c0d967e04c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2ccd40f3-cf2a-50a2-97cb-0d52c446a79d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b55fc8dd-e1e9-5cd2-9291-861293d2650f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f3fb79c9-fcd0-5bef-b03e-a5845d3e0275", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:90929809-830e-5946-946b-f68523987055", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:eb29e9e8-b40c-580f-9a0e-f650a63997c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a0df2dc9-0cc7-5a16-b41d-8e17c9075327", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:495361d6-c5ac-5ac0-905f-37925699ce40", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc. not_affected \u2014 Target version 5.2.11.RELEASE does not contain the vulnerable code pattern from CVE-2024-38820. This CVE specifically concerns improper use of .toLowerCase() without Locale.ROOT in DataBinder's disallowedFields handling, which was introduced by the CVE-2022-22968 fix. The target version predates that fix and does not perform any case conversion in setDisallowedFields() or isAllowed() methods. T...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d6a67bee-f57b-5dcb-bd04-1f6d3b0a8196", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:bf95004a-397a-5f4d-aaa5-80eb717d0730", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c9f0d562-edd7-5f0b-9db7-ed61af91ef56", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a8e61667-78f6-569a-9842-85038ce61113", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8c2f3a86-9f41-5a8d-93d5-bb32e1682de2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e3245ac1-3ab8-5805-bd53-7a61b6857a95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e1e907e6-445d-5f6f-a8fe-f228dee5af38", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b1ab4373-41e5-5867-865c-cdfdc3fa5994", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:affacd53-fe1f-5f7d-86f2-cf2d38739d65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:04870f3f-a32e-53f2-8b1f-438b4afc4529", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:77c79063-01ab-586a-9b52-98709a43877e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:59616fb2-5bc7-50ff-8cde-f20928380b5e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:04130611-c593-57de-b8f7-79fdde6c8c95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:091d42b2-d507-5e87-b8f0-39d32ca1e8ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:78cbf7e5-349e-58b7-8680-e9f0e064ccff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b0d3991a-84e1-5fdb-8992-488555d6e790", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ecb3d31b-eb31-5176-8d5b-1a81f5ae678c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2643c9ee-4093-59c8-aecd-ff170ad9ddad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ef5a27d0-bc8b-5c44-9d04-6fb1f8b96f56", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:da1cedf5-9a1e-5e05-9fba-28c0896a13f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1dfd858d-9a9f-59f7-998a-2bfd3ba0326c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:71e8c8af-e7e1-5397-a66b-8c0abea6d8f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1f7c2563-86b5-58fc-989b-f4cbb6816032", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:47c14550-a9ec-537e-8c13-a7e485bc3a8b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:3da52153-1cf8-5fb8-ba66-05720b01abe3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e91d2d85-5a3d-599b-89ba-09559971f0b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8ba667c6-f332-594c-8f54-c17ae8a8e307", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:db71884a-8271-563c-8eca-7bad9db0c7d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d81cd549-70e2-546f-900b-77716d1b9764", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:3e7a9644-6869-5eed-884d-5cd545e5d807", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c2d673cb-8fac-5ec9-8ed2-4537ec640491", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:be1ed74a-ea8f-5c14-b3af-37ea970ee92e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f2280415-7426-5ac3-af10-83a278d72d92", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:99f38d8b-e9b4-5e70-9a25-1221f0b315ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c0d69e12-99a2-5193-8de9-e75a245b8221", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:82c27670-1275-58c4-a5fc-9a5f209d89eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b235527d-a7ab-56e8-a1e7-1311039c0fa3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6d299422-9b2a-546f-ae35-cf14de854fc7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e2f7df7b-f7c3-5211-a2f4-c1ef8cc9dd2a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-webmvc." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.2.11.RELEASE-tuxcare.2" } ] }