{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c68ea87f-a48f-59d8-a2ab-a8159c98a965", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "name": "spring-expression", "version": "5.1.20.RELEASE-tuxcare.5", "purl": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:89dc0f43-c657-5d16-9a5c-ccae01fe733e", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0936adc7-13a2-5100-badc-8b6241734a16", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9916bf6d-5ced-56b0-8136-7d2f1abc7ef3", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:778fc983-6121-5e5f-b9f9-3d52524e64b4", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8b11a115-a5e0-540d-a60f-b25164acf464", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1e814867-b38f-5afe-b6db-5bec39bb6528", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7ed4ad1f-e2d7-5717-9585-0b08190f1e2c", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:fc392ac4-7fc3-57ed-9878-4647fca7c2fa", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1f3814ae-b8dd-5646-a3fc-cf9efefc86c4", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:36f670e8-d017-55b6-ac20-b4acf8f950ea", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0bb658ac-c122-5957-8a99-725679f03970", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8b293a3c-c8f0-5640-ae92-c5271e0108e2", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0f45bde3-3221-5923-b4ec-ba0dfe6b263c", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c59c622a-8875-5417-97a4-7c35e92e282b", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:366ffc51-ebb5-5d3b-be91-0ac87dfbf2d2", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9170e0be-e3f4-5cfb-b26c-5041808536da", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-expression 5.1.20.RELEASE-tuxcare.5." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9cbc2720-c81d-578b-9136-6f12d9baa11a", "id": "CVE-2024-38816", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ca880f1f-e880-5f46-b42d-da70e0310910", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ba818b7c-588d-52d0-8524-19f84400ae08", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f58e9640-06bc-5839-bfcd-b2bc33b20f43", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:798d23ee-2c87-54e0-b598-07dc5a3d7400", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:81c4e194-37a3-5da8-a173-6ffbc52a5cb4", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f7cff107-4cc2-5ec0-b3e7-88ebc1e2bdfb", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:aba67da8-558a-5e61-964b-2094a9cc7610", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:747d0bbe-1fc5-5d31-914a-2233b60e2488", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1363a4fe-89eb-54ee-9934-da1efff47d91", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0fda97b9-9461-5f52-a1e6-d14d13fd43f8", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9a594718-3e86-5b02-a06b-d51b22eaa6ef", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:aced6a2c-057c-55bb-833c-7879bc4b4129", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e158f19f-e51d-5d63-8f51-1e8113926efc", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9d42d128-2f7a-52bc-9884-208ee62042aa", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d2e754f8-4462-5bc2-a1ed-ebb4f761bcf6", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:67e5e39b-6181-5df7-8153-7a6152786a03", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b9ac455a-fba9-5b15-8486-83ff40266e04", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a309fe25-394a-5472-bc78-b59683d061a0", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7cf2fbff-8e53-508b-b9f7-039c65b65502", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b7c12c39-fa83-5aa1-82b9-9a4de54fc3ad", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6334beb4-3a30-51c3-9d6e-9783c0216127", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:55194210-cd2d-51b6-80ac-15f9feef9029", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:669da7d0-1855-5f52-b409-bd7b5ddc2925", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:dc028b35-eccd-5006-94e9-30f4f10f2924", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:337af4d6-d905-505b-934e-ee34819d54b7", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1b197a93-7e82-5b7b-9437-e78dee7a6a5e", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:670787b3-31bd-528e-814f-cb85525adc60", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:05490160-662a-563d-a2ad-4a674d17f232", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d85d7681-992e-5215-8d83-4a71fc56c096", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:36a8a012-603d-5979-a6b1-558b994cfade", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4e9a8841-7809-5d45-a3e9-dd5cfdc22bf8", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f569e753-71b2-56d3-845b-fba5943cb415", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:91042906-985a-5804-b981-148cf0235afe", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:441f88f3-e1d1-5451-8c98-b9348d33c695", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c9ce3c22-c653-53c9-8c8d-1453e992cc61", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:de04d9e6-cdf9-5461-b091-3ef733e7ba4c", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6d6dce07-11e7-5e74-b2b8-14653b85ae1f", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4a8d30f3-f6f8-598a-a077-8e808c3c13d4", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ea392278-c00c-5193-b78b-da9aa4338018", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-expression@5.1.20.RELEASE-tuxcare.5" } ] }