{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c6454697-e824-55aa-b661-42bbe1906412", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "name": "spring-orm", "version": "5.1.20.RELEASE-tuxcare.5", "purl": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:2531c5d0-34a9-580b-ac28-dbe9812da173", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a2958c35-9201-523f-be29-bd6f07385084", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:73a30438-6633-5af8-9c1f-5c801d25bc49", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ee098d7c-e49c-54e5-bada-617d7bc99397", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:34fd0398-3bb0-54f1-b3e9-d709e76762f5", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9918851b-22f0-5e64-9dec-4d1935cc397b", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8c2b4ab9-b870-5755-aea3-767adf398f68", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:55691daa-b843-5595-8a4f-c1c5ce6d3aec", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3f3371bd-3a88-5dd2-8841-9d31f2e3027c", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:38a11f31-4566-59c4-84b5-3312a60c64f8", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a577312b-cd2e-52a9-a792-11d1e1e3587b", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:79f614be-a628-5d6a-9dc8-27ce830c680e", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1265abcf-5675-5982-b285-581f5e6c837e", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b58e2ac8-945f-5732-8e85-2b596269c109", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7d721907-e583-53f7-bcc6-6620a9bd41cb", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:935bb052-536b-592c-8579-94f761ddb6e7", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-orm 5.1.20.RELEASE-tuxcare.5." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2ef32b87-96d6-5c21-8b1f-9ef72672fe23", "id": "CVE-2024-38816", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0163d17e-659a-5f43-b2b4-1d2013259a28", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8782e943-414e-5ecb-846a-49394c4d7224", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ffe45beb-e5c7-526a-a60b-05b6720d9569", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e7ae31ac-86d0-5528-9d0a-8f47734ca884", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:012b3a57-824c-5a55-a291-6931a78219fb", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:48d73bd0-b578-5dc1-8033-231f1e7da193", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:59b122f3-0908-5ced-9ed0-d6f93f101f6d", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:459284b8-6a13-59e9-8681-ca477a3dcbe3", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c1a4a7f6-eb35-5ecf-94f8-11fe4ff8dbd2", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:dd568179-a683-5623-8e26-c4f8ea077216", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3f6171a5-49bc-5657-82ad-93d6251f1503", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a385619a-1163-56cc-9282-73fb55ebdb73", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:99eb44da-bb73-58f1-bfb5-284b026cfa4e", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5f5d664b-262c-5309-b9a0-2bdec5176837", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:19bc8fc8-6467-5fa7-aa9a-a5e33ca6a539", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e0e69e0a-46a6-5d39-b407-3338e90af5a1", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a01baaf8-45e7-5119-ae14-f69308743278", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:906e9a31-a66c-59e7-af23-10a7898c9631", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e2411e9f-2d37-5952-ab5b-a92d5abebfb3", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2a112f09-8feb-532d-ad2b-03ac1bfe26dd", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:daf090fa-194b-5815-8fc9-bfdbba457894", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:eec5adb1-9ecf-5360-9dfd-59598552e905", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f991973c-531b-558f-8602-a01e963007ef", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ae53a9d5-0be6-5f68-943a-e7cbfcf81139", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0657db43-606f-5368-8ea6-2c0f2dd07168", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9b4e1639-b085-5e14-aef1-c661b015cfce", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c6112630-ecd9-5c1a-8571-3e2fcffb2cff", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:80d5d9f8-965f-5773-87e6-61142c39432e", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7e19664c-f3fd-5f48-b855-e68d8f937b2e", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:078b0565-20e3-5cf0-89d9-238d49f76e3a", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:04c8761c-57d8-59ff-9cec-f890016ddec4", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:159d06f7-c8b1-532f-b2b3-f698cef11d7b", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:69c1ac48-3ab0-5d55-ba0a-ad26d39e715c", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:48e2aa8d-a769-5fb4-9ff0-95e734f9b2f1", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:826f6a8f-4470-579b-b368-17833c762967", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:42382816-c6e4-5fd3-8ab4-db6a3af5e457", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d1c078b5-30cf-571e-bc4e-5a29de1c904c", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9be1033d-59ea-5c8b-888d-8b2249507c25", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6b13579b-88d3-58f9-b2e3-d97293c310a9", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.5" } ] }