{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:62b950b5-96eb-5da4-871c-3a1b6c82ba9a", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "name": "spring-beans", "version": "5.1.20.RELEASE-tuxcare.5", "purl": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:03f9e73d-a484-5abb-9daa-4fa0c98c34ce", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5acbe816-0aab-533a-9084-b99f6bb469a2", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ac1025eb-3118-5069-b598-05b000e34610", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3da2b414-2251-51b6-9e3c-696618b2a717", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e0730472-f436-53b1-aebb-6f586572c6a6", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:885d47de-ede9-543f-bd00-7eaec77ab711", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3aa98079-709e-547f-b116-4c7b385e5b91", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1666953e-1493-51b1-af7b-09b70081c19d", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:72413ac6-59de-5f8f-8d92-298db0ab54ff", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:14f4ad97-4d58-58df-b4b1-39c4256eec48", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:45483486-f387-514f-a5f0-3dbb6ac03c0d", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d957476e-f886-5432-9620-76d728649423", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:08213c2f-2aed-5dd7-82ac-a8d09b8492df", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:afe972d0-7df3-5c7e-b034-a839a9503006", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:245cbfd3-b994-5a4c-81b8-7eef9b3019ef", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c4e34ba6-e1f0-513c-82ec-8c377da9f057", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-beans 5.1.20.RELEASE-tuxcare.5." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0eb9a41a-5ef5-5795-b3a2-7133bd0e0675", "id": "CVE-2024-38816", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:54cf4ab1-9e40-5819-887e-d6da704298af", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5da9a829-a0d8-564f-bd66-7b50284291e4", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5a92b137-6dea-5b33-b619-13337fc7b4eb", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:abaf4373-8b8e-5ff0-a27f-399c909ab7a5", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b3960473-a99f-5955-b344-e57ff5e662b5", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4ebd6af0-04a6-56a5-81b4-0d6fc8e509d8", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b40f17f4-7fbd-54db-8eed-8dc0a4481707", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f2792196-3f89-5c62-ba31-989d9d14760c", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4a42fb77-d8c2-5e09-b1d4-9e952a7a2595", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8587de6f-2e65-53fc-9099-3184e297d592", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e763d36c-17e8-50d6-894a-ddb6f4a072b9", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2709a395-fe76-5618-95a3-04dba50d1734", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5a0c3d7d-7997-5126-857d-3c51fec1489d", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f6c2e596-5208-59a1-b424-28c881490096", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:18b14d14-27d2-50ec-9b55-27d453476df9", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bde37151-7ec8-5e87-a5a2-d9ab176fbf9a", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:48a897fb-5e28-5f7d-b035-e9c578186b28", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:61eb9376-a7b3-561e-88de-c6a205cedc30", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:55f85121-a880-512d-9ac8-b48474746d4c", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6a846b53-f55e-5bc6-9ae3-8a1560e2f36a", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f61a4653-985a-5e4c-a067-34bb27239ba5", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e1693274-c565-56c9-a778-cc6b745d5ccb", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d628bd7f-9ff1-5c17-9702-73576d7292e2", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8248bcb7-741c-51af-acbe-d218c62a1d85", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c70703a5-1237-51d7-b699-6f0d6d4032d5", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b65bda8f-f4e0-5ac4-9e62-342864fd70e9", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d101ea43-4c7d-5123-a70d-89103478c1ac", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:75a68616-801f-59ff-8cb0-bf95fc1dec5f", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bb316735-40df-57f0-acf9-acfc7b50691d", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9663441c-ebbd-5ded-aea6-b2c5011d742d", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:fbcb7ebe-ab64-514a-9960-bfece18fc868", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6785a8b2-821c-5cef-9003-8f6168691f73", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f490f8b5-d6ce-54a5-bf5e-b28340013f12", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d88a33e0-6c84-5502-ab71-70014d8457a4", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:97f596b4-bb56-5f2c-b2fc-e3c8a965005a", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9d122f14-5d70-5cb9-9772-370c808641ae", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6b985e24-c45a-5633-b45d-914e1a5f845d", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2c896cba-feb7-541b-995e-59c51befe532", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6d055fd1-c46d-5454-97fb-ba5696c4b4db", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.5" } ] }