{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e28dae65-5fba-5f39-ba67-dd10f969d950", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "name": "spring-framework-bom", "version": "5.1.20.RELEASE-tuxcare.5", "purl": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:4cf3b789-34f8-5825-a352-24485d20ccc0", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:26d87e93-d501-55f3-a0a2-34849a8d43fd", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1b6fad3e-8953-5fdc-be3e-2fee2d49b0b2", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7d710472-1252-54e4-8c1a-60354ac1897d", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:00f5b396-ef54-5c93-8618-0a69e8c08393", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:fee000e2-65ce-596e-8583-309c95a4af6c", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:fcb4a9d0-2d29-526b-9d82-c37c74741a6e", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:54abd616-cd77-515e-ba5a-c1933a45b4fd", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:34058149-0d36-58f7-ad02-f4ccd84ffdd8", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5f8d9715-86d1-5901-bb38-8ea6298ba627", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:208ac362-4991-59c9-9e62-555781bca30f", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6e2a3407-3964-5c79-aea9-fc70f525e117", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:31504b11-5a77-5c62-9008-5c530770ca4b", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d2977f61-0b94-5450-9f2a-4f5327aea96e", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2a9246d4-49d2-5ee4-b0e2-d094c4e3a599", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1bf468c7-9592-57dc-9a1d-4218c3ae79ba", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-framework-bom 5.1.20.RELEASE-tuxcare.5." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:34c10e3d-6e62-526a-bf9f-dbcdc63bbe95", "id": "CVE-2024-38816", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3eeb008f-31b6-58ec-8c2b-85d1ed1810c4", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:05738090-6f20-5eb8-b5f9-d6c908ca59de", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4ac89081-1d28-5a12-953d-f3b880ea68d4", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e2cda481-18ec-5a9e-81b7-b86bf8f33670", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:77c93e1f-0cd6-52a4-a609-48d85793ad9c", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f72bc04f-3afa-512c-80f4-0aa2f29b8261", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:52d7190b-eb01-59bf-954e-236e462752d1", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d43d963e-c1ca-5f5f-a454-504e0683baaa", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ca69630c-034a-5798-bc7c-96fd87864b26", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:498df000-0da3-5f0a-bafe-0034625eb864", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:09ce3121-9a00-5c31-bdb2-e494693ca796", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:874efa32-c097-5e49-9c48-e08c4535a279", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0d96c0a0-64d4-563e-9f7a-891845863fc4", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e13c483a-112b-5724-95b6-41f72d1e425f", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b17ffc67-8c10-5f9c-9e5e-a63e64a8f765", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b0dd40bb-b8be-5602-93f2-95e3e2c27300", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c382659b-8e0c-54eb-9c0f-91c1718dbd43", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:67bf15d5-3f90-5d4c-a1ad-c47bd205cd1e", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:857775a8-60ca-5e2c-b860-0cd8a68c2a1f", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:807a1b19-e497-56af-a2f3-3f5929fcab2d", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4262b314-6f7f-52f5-baf2-363887d6f275", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3a8a7686-6244-5847-8c2b-c03eeee9a86f", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5514b98c-8520-5063-ab8a-3df3323e8303", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7d5f6c07-b801-507f-a511-f54df07ceaed", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f425b289-3905-59df-9285-ba7626db04cb", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:69f89ab8-16dd-5cf2-80f9-683985550e8a", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ab8e5361-bdec-545c-93d3-d5f16a4a4fdf", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bc50dcc4-7c5d-5817-8474-25cdb0253069", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:dd35c0d4-684a-5417-8086-d3b036e3e0c2", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cc916442-f28e-5c5a-aaa0-7a9dedb56a76", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f24b33b8-6034-5e0f-bc5f-c62cc35d538e", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:034a890d-2976-5f6f-b012-9a8b6efd700a", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b2aaa114-12c9-5580-a4d9-1885a5fc59a1", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e65202bd-150f-58f3-9ac0-b078a307d14e", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:31e28730-3420-50b7-a330-2e8e5a7e08cf", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a9975a23-abdf-5fe9-9f15-6e68ef89b8f8", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7503f451-1cd7-565f-b3c9-dbf44cf3c55d", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:75fff609-cde6-5de8-ae94-bf15e049638a", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5a3bf091-b420-5258-92a6-c8c379ed7c8d", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.5" } ] }