{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e1650157-c18f-522e-9680-990ecbb71460", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "name": "spring-web", "version": "5.1.20.RELEASE-tuxcare.5", "purl": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:8baf7582-774e-56bd-8166-a79f08fd82e5", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5fbc7e4f-2223-56de-909a-6feb7ae428bb", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ff959a16-5009-5e0e-8857-8ff54f3f4125", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:66f63ba2-ba56-522e-84a9-15a87e27746b", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cd5b9f20-999a-565e-969c-87b36e526e74", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3dbcf3d6-074c-5aba-9057-69a9cda51f62", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:db21c85f-1eab-54f8-996a-7e63977aa9d2", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a1ca7c67-e975-58d4-b208-be832d24debe", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:75f4c4c8-badd-5b1f-bd9b-d43f7c0f419a", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:25b2c2c8-574d-5acd-96c6-9f60c80b77f9", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:88015a24-b7e3-5bbf-8431-12dcf3cb7ebf", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f3518ab2-17af-5600-97a0-37dd64561746", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:51a457a2-786b-5f9d-8c0a-6019b0bda9c7", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4685b8a4-6449-5f4b-b531-456061d33509", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ef4f0ba4-35c0-543c-b14d-1029d8b8ecca", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:50437cfc-ab10-551c-b89b-070196169600", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-web 5.1.20.RELEASE-tuxcare.5." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:df20aa9a-8278-544f-8fe8-0b1349f2fad4", "id": "CVE-2024-38816", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ab347afc-090a-5112-b554-7215763c1382", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f293a946-cad1-5b5e-94af-c1ce4b91c3d2", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f77633f9-10f8-566b-aafd-b3cd9a5d4e4a", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b462e65c-d830-5f05-9f70-0b83ce77c49c", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:de6555e6-9633-5dfc-aaa7-d9687ea3d413", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:380baade-d642-5a38-bf55-93d1ef40f9e9", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:24b18a3b-073a-5f13-b67e-117706572674", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1532e14c-9655-530a-b8f6-1780591d724b", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:691a954c-6b1a-5927-9711-109dbbd489b5", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:73a6e25e-befe-57a2-ba4b-142b5ec862a6", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bd94c842-db05-5555-8ad2-b8ae5eac92c2", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b2dd9f73-9b02-55b9-b9e0-d5c4dfd3928f", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:50f942e3-31d2-5e1f-9d58-65992ba2977d", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5db0a8f0-7ead-5664-95c7-fb153a834c25", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:15527752-5551-51a0-867f-8256165374a5", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3fc4fc4d-c5f1-54d3-9928-6ee98e1d8e7d", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:fbc0cae0-fa5c-56bc-b321-6ecd98130a12", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:716543db-d834-58bd-af2a-26a92e12fd1f", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:89eb3ede-e4b6-5e77-9987-80152604c59a", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:463b086f-edc9-56fb-baa9-642b13cb6546", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6641a4c3-b046-5419-938f-bd2324cd04ec", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:29f9f43f-ba0a-5a3c-90c5-7e0bc8a1f46c", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0efe1929-0fd7-59e4-b684-1c886506db23", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1207c273-6fc3-5a80-b257-4289d9945fed", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cb389d0a-894b-5545-884d-2a7cfccd6510", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:91e532b1-fd6a-5ebf-912c-f84da1dad8d1", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:baae5d48-2a81-5a95-95a6-a7660aa8af60", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6f60e59e-4ee3-5d4e-918e-61dc3b18de25", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7fa09f85-4535-5afe-a58c-6eb473798647", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:66d0559e-60dc-592b-9e8c-03060b1ce4a6", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:76afa74a-2728-589e-8b8b-189691393d2b", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8908c066-4c88-51f3-92ed-15d986740448", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a3ca1e3e-2627-5e84-ad8a-799a2ac28733", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d62da731-fbc1-5745-ae45-cfb29d076fc6", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ba0af11d-033c-5013-ac44-2645d6341227", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e0e97a14-1455-5ad4-a692-b405c335b46a", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0edf8700-a283-5e54-b49f-2f3b03f5069f", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f4ab3eea-3851-5eba-a286-e1e63edccd64", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cfb38c36-7e0d-54a9-993e-44c1dd5564e5", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.5" } ] }