{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b5c8d9e1-3a05-52c5-9bce-3d157d187d33", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "name": "spring-jdbc", "version": "5.1.20.RELEASE-tuxcare.5", "purl": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:12da96e5-f772-56f9-ad39-1307c7cbf39a", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:05d99628-9c4f-519a-8705-1c043174ad09", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0cc9e3f2-5972-5dbc-9c65-3b0c980ab442", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6972f068-9f47-54f9-a845-d5cdad647518", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4b66eecb-a4e4-5d02-941f-b3133d547b27", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:510fd085-51ab-548e-89af-2ef078aa715c", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2c013c9c-22d3-5876-b7fb-f23fe5494a7d", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:254d7c19-99cf-5801-99f0-0d5100ffc559", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:326d287f-f4ed-599f-9460-00d974f0dc59", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:edbcb8f1-d2ae-51ca-bf92-a3f1e678bd9f", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:10351a0c-80fc-5569-948c-77ee90dd46a3", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a97f1ac1-5905-51e3-ba29-1f6b9c224a51", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:12ed0436-7f28-5702-ba23-563c3109981c", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0df9b7db-e0f4-575d-921e-e49a011fd8cd", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bcdc27be-8a90-519d-afc7-5015c0d4cf52", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8531d12a-4f4a-5342-bac5-a48f6ce22fac", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-jdbc 5.1.20.RELEASE-tuxcare.5." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d5f6bcc0-28a5-5bd2-95bc-e809163d5762", "id": "CVE-2024-38816", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e2f37e3e-74c9-5b46-8046-65ebe6ba987e", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:35a9619e-2e0f-56b0-8097-197c8bd5918c", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8ab60ccc-3c24-5932-9868-4be4ca93799b", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e9660a00-4451-5238-95e4-b7f82c52a10d", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:fd8efcf5-effb-5fa1-a304-e9d55c641d69", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:793c7b33-1fc9-5c34-b421-7efc9b410a42", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0f73115f-c879-55b1-ab8f-998054372af2", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a74f1928-f988-5fa3-814a-ee7de4d4141e", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:fec13947-30e2-5078-9337-e19c1c0016e2", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b13e96d3-c189-558b-b66d-66c22e79ce12", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:487260ef-9cc2-5631-8b04-f25f7d2587d9", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:81eb4d5d-523f-5fa9-ba83-195e4fe495ca", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:98b157aa-6dfd-5bf1-bc74-07e93598ac8c", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f0c4a4a3-f615-5298-bd94-beb032ed3185", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:44e4f5c9-04fd-5056-890e-aa9164d0dfd0", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d1d2ddc2-02cc-5580-9af5-1cea8ac36ef6", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:10b7b4a7-c489-59e4-8287-8e58b09c94dd", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cfaed8ce-cbfa-589d-b05a-266742d7f741", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9d05f406-3049-54cd-b8c7-a64640d6c2f1", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:151733c7-f86e-54e0-89c1-95256cb67320", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3bc2a9f5-c904-5048-a7bf-32bb7d4619bd", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2c1330c1-96c8-5a23-8ad4-4e38d009b63c", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f7600bdd-e47d-5c6d-b346-f3b3f60c5e7f", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4d888305-74e3-516e-8f74-514b39c65ffe", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:99d2fe02-f8f6-56c7-91e8-8d47d711ff5d", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:86c273fe-7d89-5b6b-b303-29668c69b37f", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:13d34883-fd9e-5ca4-823c-29aa49fb26e6", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c5863f1c-cd31-5e11-8b6c-f75d723815e3", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8dcce8bb-4002-5b7f-8d36-3354b2e55e3c", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f0ea51d4-ba57-5163-9893-c02100372a18", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:42b8a9c2-2a97-580f-a628-885cd518896c", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:eda20a6c-f893-5d65-a4cc-77b7f797862b", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5ea6c466-f7d2-5dd4-a83e-bca49939c0aa", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bc7bc539-9b53-5ce6-988f-21d2678fbb5f", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b34887b8-9054-5684-974b-588b48ac8a9e", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4ff7a5ad-0639-5f9e-86a4-3275a10b3594", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:fc6901f8-e1fb-5451-82ff-9772494966b8", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c66b171f-3110-56cc-847a-2985cbe9f531", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cd6d8801-5d1e-5d44-9bfb-8e626eb98e7f", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.5" } ] }