{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6393c711-7539-500f-94a6-fad5a5be4c96", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "name": "spring-webmvc", "version": "5.1.20.RELEASE-tuxcare.5", "purl": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:0783d719-dd9e-5144-a217-1bdf0c9c756e", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:342244db-aa2b-5abf-bfb9-0c7033d86220", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1befb55e-76b2-57e9-ac3a-ea8d24493d1f", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bbed6316-33a5-51d0-9d99-d9bbdb9544b5", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2e18942f-b286-51bb-90b4-7aa17b287db6", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e2514148-fe59-5510-b5ca-d67d9ce83ff7", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:26e3f485-a851-5497-a18e-4b43da052e2e", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e205aee2-14c4-5fec-a451-d98000018269", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ef1f2f8e-3fe7-5c87-919d-f0749ce26320", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:163a8323-930c-5c44-83ec-32088817cdb5", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a75a96f6-40c4-5354-accf-c922692ce77b", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:929f0b07-2189-56e3-8802-79533210e047", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:74613e6d-cc6b-5577-bd04-a9f02144d99a", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:52786a08-9e09-5bec-aa1d-06b0aef74127", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:90c71fe7-1ca2-5c27-a6b4-02853d6bfb65", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:845ed285-7dc9-5269-a4fa-0fed8e63140a", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-webmvc 5.1.20.RELEASE-tuxcare.5." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1fd16e45-6953-5a8a-afe3-42df241f488a", "id": "CVE-2024-38816", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9f6f238a-4a95-5312-bf98-0357ca69cbf5", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2908a19a-7978-5102-abe7-d425b0bdf6e3", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:55e50c77-9890-5473-a737-ce163355c420", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:748af6c8-4098-5430-89a4-3aad2745f95a", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4c71b650-659e-57de-be48-4ba732658b9b", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:50aa7304-f4bc-5f3f-9de4-64d6e2136297", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c2e0ad29-87a5-5c0d-80a2-fab0056bfc8a", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3ce66bf1-9651-53d8-96ec-6dcd6ecfddca", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:05c68024-e4d2-572d-a162-f6a491e15967", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0693460b-8b86-52d4-b7ce-01af3f7cca84", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a90cec5f-f873-50e2-9389-d691afa6f297", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:54e499af-7b17-52f0-b0c2-f24903aa52dc", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:38d5eace-4912-55f7-ba17-cd9e58b3f2fc", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:269eee6d-933c-5469-8741-db9be1987a77", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b16599df-15e8-505b-83a2-b2fb6fb1a3a8", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a0a555ea-a460-5cc4-a212-8febb4c973f7", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:530b3cac-d03f-537f-9f21-998dcf46f285", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:739712fe-39b9-5e8f-9dff-df073c72429c", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9f2b01ed-567b-5784-b8cf-8cdae9581611", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ef5ef0d5-7082-5dd2-927e-9b4334c75261", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:89d538cf-f49f-5c92-a4b7-650e78b92919", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:07fbd88a-390d-57fc-95de-319856b46574", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e6ad73bf-57fc-5615-83d8-9303bfb08da1", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:978e718e-2c21-5ae4-b399-3774d20ea74a", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3e1101fa-c617-5fb2-b8e9-1865f9aaa6bf", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f0af12b1-2662-5248-b3e5-59d7f4cc5ca1", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b9295195-6ca6-5d2e-a38a-a0b90fe3c006", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9ab59871-09b6-53d4-ac3f-f7a7cff4081b", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9570604c-3453-5301-929e-d773596a62f2", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f0b0da71-360d-53f7-a2ce-eb41fb2de32c", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:20ae5e6b-eceb-5e94-bd06-b844d657b4a5", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b14044b9-e69f-5a69-8962-5adc907b4aae", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:dbf46acf-cb2a-57ae-a900-1100332b6142", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:79cbb876-af79-51d0-bdd4-14fb382dd18d", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2f71efa6-9f02-5536-bf0d-ff8ef1c36f04", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cb2977eb-67db-50e6-8207-01bd9a84ce32", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6a376c10-2208-5a77-bdee-99dd15151a8c", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:202a24d7-6e20-5026-8077-b6b9cfcae9e1", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:12b5f8db-f440-575d-8eae-05d1dfdc51e0", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.5" } ] }