{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0f5d4fbf-f849-57f9-845f-4332b9a691d1", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "name": "spring-webflux", "version": "5.1.20.RELEASE-tuxcare.5", "purl": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:e1845181-aa69-57d2-8cf8-92381c798684", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:db882d2c-f2fb-5e92-927b-241be4e3caf6", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:df65e151-a9ae-51cb-ad89-63a7b53a7e2b", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:519633cf-04cf-5fd9-8bd5-274fd8fedfa9", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cac0a8d9-6ff7-59ff-b085-89e27d5f3010", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c9a11097-4e54-545e-950a-2a3f129cc916", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4427ddc0-84c8-533a-b89b-68567c00a148", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:637d64b3-ed65-5050-a368-27ec23bf3a03", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bf63271c-fc8e-51ec-b2ec-989acf52285c", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9bea3d60-8eaa-5746-a0e9-ca657d63772c", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9bf8d2bb-9da9-5768-aedd-5b07c6e13825", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e54d77f4-90ac-54dc-ba42-feede23ce965", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:db3284d7-a153-56f4-b59a-979da3312707", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f355d771-9302-59a6-8a81-7db0906cd74c", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c55fb063-1367-5042-926d-94511f8481d2", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:edbaef2b-d38b-5414-9602-e31d264ee804", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-webflux 5.1.20.RELEASE-tuxcare.5." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:59c2f761-b5c7-5416-bfee-1b5c15d9027f", "id": "CVE-2024-38816", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9d8bcfaa-e80d-5015-876d-36d91ca798ee", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:67cbc7fa-8e04-5ba1-a78b-e2b9f05612a6", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:fe8de469-5611-5391-a274-15acece0f13c", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:aeb67d3c-fc2d-5464-9813-0ca9ccc5cad2", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f29e4c5c-b147-525d-92f6-f079142a67ca", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9568e2b4-b99c-5958-aa1d-48ed0096aefc", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:eda795cb-ae14-5dc8-a5a2-5c072910b7ff", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9f8495bc-fe3a-540e-aa47-2c1eff5cf019", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:809d6043-3446-59b7-b6da-bef140309c05", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:27891475-f872-5dd4-a4e0-1236f8062bd9", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8b56bbd0-4fea-56ab-9e29-2ff03988855f", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d66871b1-cf06-5964-a6d5-fadbad5a8265", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ac70d428-ffb3-5c8b-8bd3-9def0aea7938", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ed06da3b-3955-5d83-8c28-51efa70376ef", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cf1b9a03-fe3f-5597-81cc-b8b7aa29ac1f", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:18f47125-d2ff-595e-aab4-62dfa313275a", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:db1b458f-f984-5b8c-bfc5-5645cbf7be9a", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4ca64a30-2e5d-5360-84b1-e4a603f07614", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:41dbbb93-80f2-5bb6-b02c-e28d06a46c2f", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0fa29510-7da8-5ddf-a6b3-da7e26118876", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cd6a2ecf-04e6-5dfe-b8b4-e12e12988864", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:190235e6-b3f4-55c8-bad5-161b23cfc72e", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c74a58b8-7854-5791-8a20-18e463f3738c", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e1142c1a-d480-5942-98f9-1aafe47397f5", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:98a29ce7-d41f-5e34-9e52-23a08b0cdd07", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7ba2d6b2-027a-5f44-ad94-7dcbfb793755", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:699874fe-c11a-5741-8475-f418ff88694a", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cf045d61-ae3a-5eda-8b32-40e610b8f51a", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:41304dc5-4bce-546f-866c-ea0d762cd842", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:85413eb8-c55c-58d5-8edc-4c7ec37d197d", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9a7df86f-4c4c-5974-bc81-11d62ee1e52e", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0e56578f-8aad-5826-909b-93062fac9aad", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:32563b6a-4e78-53b4-84fc-1e5f21ef6ab8", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:52f6393d-0abc-501b-9be2-2694c25562a0", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a1a33023-294f-5761-a172-47588b44ea48", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e0c2e36a-db3c-5292-a291-49f7f8899761", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c8bdd3e6-4d1f-5f24-a57b-bec2bf3de93f", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:dc1d6683-6d78-580d-b528-0e6671681039", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ea9e11cf-ecc3-5c2c-85e8-b5b570e30899", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.5" } ] }