{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ce6c798a-3b9c-5343-8710-66031dae6525", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "name": "spring-instrument", "version": "5.1.20.RELEASE-tuxcare.5", "purl": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:625e8e73-c83d-5863-b372-08946b942d12", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:fb0f3ba3-5257-51ae-ac0d-0f547cbddb81", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:823f5f3d-f427-5d82-923e-ca78bb29c7fb", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:90957095-e42c-5e8a-8794-0ac6ffaef7b6", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8ebfb71d-ab8a-5e4d-b67c-95fb3ccfba01", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0e49da52-3d04-51e1-9920-cccb7b5f65f8", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a6850c2a-15c0-5285-8e5b-c7cfe0606d39", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ea6bfae9-d1d1-5cca-befd-10a3de8a90c8", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c91eacf9-1ec5-5b97-92ae-d5c2c2d09c59", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:44d25c93-9362-5192-87c2-4f289d1fdac4", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a69dd356-0508-5cf1-9d65-8220bb580dd8", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8102774c-ac24-5e97-9dfb-5903329a85c5", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c3cc3843-4d53-55ab-8b33-f6ce43492edb", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bdb7439a-8c5a-5d54-a795-dc9e0d5850fd", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d77ee258-eeb6-5d54-b019-5a6278d60a03", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5c853cba-4def-56be-9fd3-28376b90f06a", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-instrument 5.1.20.RELEASE-tuxcare.5." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:99a3e376-67ea-54d0-ad33-ad5134791274", "id": "CVE-2024-38816", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9453267b-2db6-56ef-929e-76a9a20f5720", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d8d01dbd-11e5-55dc-8148-c2099a32a536", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2c6ff550-d266-56c5-9338-61cc3fc2cd60", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3fe2225e-3b3c-54da-bb1a-436efac05c63", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c56fdace-1de3-5f7e-a5aa-d92bf6060ef8", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f3d3622c-2008-5b31-8974-5666f5717f66", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1df20fbe-fc3e-5d68-85ad-be1039171a54", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:06501a5e-b1c6-5514-b661-f1f974a93910", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c2cf723d-6337-5421-9aa2-32ce1b350138", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8f1a8bc4-0ec6-5602-957d-4d4302e9c9c1", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2179d01f-2922-5ce2-b38f-83ad8835e7b5", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:dd4547f5-d45b-5adc-a582-45e498458912", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2771b8a6-690c-52f9-bce8-7560c8cf2c17", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e7c838bf-091c-5f0a-9d75-195020bfd1d9", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a31b61d4-0af0-58e1-a7cd-ba4f3e384b1d", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cd8838a9-ab43-56a3-9120-6b5e54cf7f11", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a45e616c-e56e-52b6-b66c-3b96c4dfa3a5", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a6f3677a-f75b-5ccf-b33f-ff6a8598b56e", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8321b27e-90fd-5a77-bffe-440cd542a15c", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:984a5fb8-7abe-5bfc-b7e0-14b04f1ce688", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:da6a3d32-a5c7-5026-bad3-7e1e66128051", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b0e9ee7e-acb6-58be-9688-c02b46d034cb", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6b9bb0af-9bec-5b86-8c42-bd1dbb5a6c7b", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f8005d78-5641-54f2-9b92-91825f3ee34a", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:98206936-09e0-582d-ba05-f356ebf76e3b", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6c07f484-ddcd-5e33-a91e-035e89080ece", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:fa507267-7474-5c80-9fad-1cb270e7e421", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b3eb151f-3098-5467-a699-8f28924522ff", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:da739d1a-e3fd-5eac-be19-44c265411c94", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e6aabdd5-9f53-57b6-beea-e3cec0d43278", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f5af0f21-a29d-5729-bd4e-206e86261b12", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4bddc3d4-9af5-59ab-8ee1-18de18bfd2db", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ea347dce-d57a-5ac7-8096-04ae22387194", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a57d5e53-9922-505f-b3d7-2374885f93c5", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5504f3f3-1c9f-5bcb-890a-08b8f6acf611", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d07e1b84-008f-5f72-a135-b41ea81d81ec", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:23acbbbd-ab43-55f1-a0db-ec02370e0406", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3a10f25a-985b-5136-914b-892aa85c53bd", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a4c6c877-c3cf-5d46-b97b-c056512c046a", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.5" } ] }