{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9639ac7c-fb69-53e7-9c21-3b02070f29b3", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "name": "spring-jcl", "version": "5.1.20.RELEASE-tuxcare.5", "purl": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:c57a175a-98fd-5614-84dc-1cd4cbdbd2ab", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cceedbc6-2b4e-5d92-9f70-50eb36d4dc9d", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e83b8ea9-7c3e-5941-b54e-6fb0de5a7c50", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b0d2c018-ef2d-52e9-8829-96c5ff0a573a", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4a92845a-1675-57f2-9bc7-6767528496d4", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b019d75b-daa2-5ec8-9582-16e8e3dfb428", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:987efb9c-7fbf-553a-9b76-07a6e0d607d6", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e6334da3-e3cb-531f-919c-ee883a98ce28", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b67737b6-9c1f-54fc-81b1-30b4dbfa1e68", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ad4d1aaa-0ce5-5730-b269-fae7a4cf5e22", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a0a253dc-c2e0-5a4b-80e7-3652637780a8", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9b78951c-5a67-53ed-a575-43bf2fbe3c51", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3a75decf-ec84-5e35-813b-48482a5285f7", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0fdf9331-9b6b-5f92-b9d1-50505a1e5ded", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9dd00cec-ee2d-502c-86ca-76d03e951864", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b4a11750-6de8-57c3-840c-f397bceca114", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-jcl 5.1.20.RELEASE-tuxcare.5." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d186b20a-d605-596e-abec-189d69009188", "id": "CVE-2024-38816", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1965f052-1044-54c0-9eb9-a240a2f4086e", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2951d4a7-8bd1-5bfe-a40d-622f1f9580a0", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4e1312b6-ee04-5824-82a9-913d913c10ab", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:eb3b6548-55fc-5ff3-913a-3ec962ec18f5", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:851eb8f6-99a0-5e74-bd5b-345f9a54745e", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bf230538-8a9d-58dc-8c58-0ea0a747af7a", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4acae509-8ddb-58d8-850e-90ae5175563b", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0c314fcb-d668-5113-84a3-27acf0d84a95", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0f737f54-46ec-54d2-80ef-a7ca80365bda", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:89c4b53e-c773-537a-8d2d-022f18c273e2", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0dc29c67-f933-54ba-97f9-337d0f1208b3", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:46120312-d663-58f3-b66c-57dbf4bd0fc7", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b6451ea8-fa6c-5649-8723-52aa8f56ec4e", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cbfb03e0-17a8-5739-b37e-591178bce047", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:56e2ab44-4be5-5e92-99f4-a3097fc5cdc9", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c9fa5e5c-35ca-55fb-9d7e-ebfc5ef4b892", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:50c4b928-d50a-5613-9c4b-61b2b5ea104c", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5c77c71e-dcc2-5279-bd48-ddf704b7b649", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:170a4139-2ace-5e10-91c5-42761e21ea07", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c53e6b9a-99fb-521c-971b-013e340b19f7", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1d3109bd-e645-5cf6-ba3d-e0e409695a6b", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1412c3bb-b08b-5315-b90e-617ebb4fcf81", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2b32adcc-0439-573b-877b-cfe635cc1067", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a4b8a735-618c-5945-bcdd-3cff0db88ac9", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5853475b-f8b2-5e9a-92c9-a2cfa4e008a9", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6ddfff94-4d8e-5590-a3a0-867a75795c84", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e26e1fed-e83c-5ac5-89ba-d6efba65697e", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ee0cffaa-c230-51b9-be1f-25e68bf69a62", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f136f7db-4d3f-53f3-9bd4-5c35ab4d1958", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:70d48013-6563-5123-8249-811f1e57ebe1", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d8d3b2ed-c9fe-5db4-acc2-ea6f19100658", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7e64b2e2-323b-55d5-aa26-4b2455d3c8cc", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ee57ea5e-23b8-5b3b-a146-57f9ed28a2f6", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f56502d8-94e9-5d83-9aa9-c8482e6497cf", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b280f96c-450d-5d67-be8d-df5fc660f776", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5e9e1448-43d4-5b4a-9c99-9e53cd376475", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:10125afd-bc0b-5367-b550-3ca55e41524c", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:16e80895-5c04-5013-9afe-35cea36b57d6", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7899ac09-491a-532a-b462-6c8d31ba26b9", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.5" } ] }