{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0fb70ed6-d3f7-562e-8281-bb829e8cda3a", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "name": "spring-test", "version": "5.1.20.RELEASE-tuxcare.5", "purl": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:a49ec9f9-fe35-5227-bab5-2f36f7de1fef", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f9feade4-3569-5bd9-8887-4b9aa457e4f8", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:12af9ae0-2f20-5e19-b1a7-e81001ab3cbb", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0a998ad8-4099-5ceb-a226-01f63845536e", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:25e54933-2584-58c7-b318-acd980c926e7", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:91f910bc-6133-5d08-8b91-f86c9da3908e", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3d154ac2-7767-5acf-9b5c-296748bd994e", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b12c2030-d51c-5537-ae0d-22ae564ec3bd", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:07573b98-5620-5ce1-b811-bd71ada880f0", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:24871399-475b-5fd9-a069-d2c46966ae08", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:37cf7020-0220-5f4b-a5c0-0792c16f9ec8", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5d3104c9-cf55-5bc8-b856-112c5dd5a96a", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a0f810c8-8123-5a22-ad2a-2cda356bcd06", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:52b920e2-4fac-5a78-a569-610ac48ba22c", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0428ddad-254b-5f8b-a990-b6f8f5162b7b", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b959642f-e06c-5c48-8f5f-fd8cb922fcf8", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-test 5.1.20.RELEASE-tuxcare.5." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:fd0b5cf8-19a7-5f96-8f41-b2b419237b9e", "id": "CVE-2024-38816", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:864dcaa4-370e-5a03-8f15-9e0764b8ace7", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7567f02c-26ff-5c42-bf72-dfc9d1db01a3", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8e7ba1ea-bb73-5d1f-96d4-1040316a432d", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bf94eed3-b5dd-5353-b5c5-743b21d56d0f", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:346b773a-950b-5787-a680-b06a147e6900", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c9c7e7f9-c733-505f-a8fa-f6e0fc916cfd", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9bf68c7d-e394-53a5-b1f6-19538bb9957d", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:359f01f0-d6d4-542b-ad73-6c558797fd73", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:edd8ecd9-e74a-5f61-b06a-218934428ce4", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:276f0461-1634-5ceb-9576-e14993ada280", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5bfecb3f-179e-53bd-a642-3b38594fdb64", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:32270dee-bbe9-5e5a-9d2a-061c5cce9cc7", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:921ded49-8796-5260-8e34-0e5f6b0571d2", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3de2d49e-8f20-5c5a-ad72-2a606375c40d", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ae3be26e-0339-57d8-9207-e07a871cc13d", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f91caa75-0f58-505e-a698-592c70246874", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1d45c48a-301b-580f-9083-4a7da5fb5582", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:049f6be0-a22b-5f17-bf5d-70c9cac67dbd", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:15a75c28-3590-544a-bc50-944399fc19d9", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:318d7380-1ef0-5a4f-8440-534eaf6ad5b4", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:61d3ad2d-3556-5cc1-a95b-e25035624c6e", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:03f33a35-0eb6-5887-b68d-8ec7afaed67e", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c446595e-3c8b-51db-bc9c-cf9c73cca95b", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1b38ebf5-2d5d-5149-a665-5f0be7e14a3e", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4e6083fb-c44f-5064-9ec7-a0d03339b50c", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:125763d7-4218-5c85-9387-79bd6ac7eec0", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9fa0a5a0-a2bf-51a9-905d-8aaf24a01197", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ce0a08da-b7fb-5c18-9894-d8132f2567ed", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9f48dddf-ecca-5014-9800-347d9a1efc9c", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:110e46b4-5c3c-53da-9369-078c56c9fb4c", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:acec2f79-3369-5fdd-ac91-bb62ddb163f3", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:22a47642-c9fb-52ae-90bf-36785e46c6db", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:99a0a57e-ec1f-54fa-8502-8be244645cea", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d6a5dcee-7962-559f-9a94-f0d1f95a3e29", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6a4261d2-20df-588f-85ee-186545186c67", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e7d54290-e092-518d-accb-6e569d78d311", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:106f1315-abda-58cd-9276-e958ab6bb116", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:178ebeb9-a2c5-586a-b16a-d4f538d42f10", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:fe2a0b2a-dde9-56d4-9540-9e750efb0436", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-test@5.1.20.RELEASE-tuxcare.5" } ] }