{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:dc6cf335-247c-5162-ba62-4aff3535dfec", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "name": "spring-oxm", "version": "5.1.20.RELEASE-tuxcare.5", "purl": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:f1813830-70ac-5fd3-9de5-6599e9468bcf", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c507dbbe-ffc3-5483-a39f-79ca5d5a3fb8", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7615a4a2-4577-53a9-9346-340efeb097e6", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0e5a7887-72e8-57d0-bfe3-6232cea3ff63", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d51f5e04-8739-5403-a355-11f0cb87b818", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c74d1cb2-a4c4-5f25-b90f-da166f3d26ff", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ec89c166-8a5f-57f9-a155-5ece8db73f2d", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9491226f-dbfd-59d6-969b-1d5f519e5e2f", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d126226c-8b75-5dae-946b-4e76cac179fa", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:45da8e8a-5b86-5ac8-9130-9704e7697df1", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2589dba0-4cf6-5fdc-93da-cc3187d1ba9d", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6d7edd89-8839-55de-8f85-2b457842b169", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1c4f5209-0bb1-54d2-a38c-07fdf69ac999", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:39508516-a6bf-5bbb-a779-840db8562ac2", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:684a679a-e33e-5e69-9dd6-56d4e5d3cb63", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c05c14a7-ad98-5b3d-9550-a5477943ff22", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-oxm 5.1.20.RELEASE-tuxcare.5." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2495a28e-9cde-59ba-af0f-c66d2e1824b3", "id": "CVE-2024-38816", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:122b7a38-db4c-5655-964c-52848f5dd25f", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5131e89e-3d72-5b3d-8151-665b43c280b5", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c26a4c01-217b-5def-834c-9224dba392a4", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3763d4ad-19fb-5c18-9f85-4579f48ff188", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:29838695-d1f7-56f3-807b-37adda892f76", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:14618267-5c57-5d14-b550-40a412ff3a6b", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d39fb2bf-3d4d-5ba1-b6b2-b60059400b40", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6598168d-9310-5204-b662-2eba0b7b9855", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cfd8d5e6-de8c-5b85-b858-76e6ccff1ea0", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3fbba0a6-42fe-5709-828a-5c434e1ddced", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b65a1b8e-b294-500d-8a66-eb5e76239dbd", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:77cc5b3f-8df2-5dfa-9743-e2493cd004e1", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:05092d91-a51c-525e-8072-c4d142d12017", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f109446e-0226-5267-a08e-6d2b4184c714", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:82bbcfce-e2ae-56f8-b896-b9da261d10de", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b4652d50-a5b2-571a-b2bd-9d7785390b97", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f3b25995-76bd-57b9-943c-6e68e31088b7", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6acf7e99-6ffe-5611-8c1c-97f26bfd3477", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3789b396-d420-5cb5-a7f2-8d69f4ae14e0", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:78288691-d977-5699-ae04-8a1d6660ae65", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1b9a6a5e-84da-5ef8-a3f0-dd26d38b6ea4", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:29beeba5-94da-53ec-ab40-0c69d520b815", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:265c7040-9604-5457-b184-8df48eb5346e", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:290f55ba-3ed0-53c9-ba33-2be6913dc168", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:70e5042f-57a4-54e9-b7c7-fd2816e4a6da", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:022b466c-e269-5f75-b924-3faac24e6ec7", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e32a2d96-56f1-53b4-927a-81ff5e5ea2d3", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1c503311-0994-5a58-a758-a1101713dcdb", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5dfa7090-96f4-5a73-8a71-fcec60cd2c37", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ba3e778a-c994-5566-94e1-6ffe64e088c3", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9de1c2b1-4c8e-518f-8f7b-3c7bdff74281", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1c731a1c-a42d-52c0-85b7-5688e6b9c114", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:82c66c9a-7e24-5291-836a-899d2b4a8e34", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:77229109-552c-5bda-b3ed-72805853d8ca", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8c69a90b-4704-53a0-8440-41cbe85cfde3", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d635dafb-0d0b-511d-894a-aa9d5ddc0dc9", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4d778c2d-ba16-5c33-86a3-dfd69792feba", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:89bf85f0-6c2c-5b79-9ea8-6ed9ddb965af", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8178a6fe-a89d-5302-996d-5f5059657f22", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.20.RELEASE-tuxcare.5" } ] }