{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:477b9e86-677f-59fc-95f3-d2f6766efcec", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-webmvc", "purl": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3", "version": "6.2.3-tuxcare.3", "pedigree": { "ancestors": [ { "name": "spring-webmvc", "purl": "pkg:maven/org.springframework/spring-webmvc@6.2.3", "type": "library", "group": "org.springframework", "version": "6.2.3" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2009-1190", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:a83ac1a7-2edc-5994-9c5d-015e0583d558", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-1190 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2011-2730", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:0c486996-cfc6-5ccb-acb8-549b3a52378f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-2730 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2011-2894", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:303260b0-2ef7-5346-a773-a0734c8a146c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-2894 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2013-6429", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:2203a8fe-5bf7-5325-a91a-b3a1f65271c2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6429 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2013-6430", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:1eb2e40b-e343-55be-b91a-f6f0d546aba1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6430 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2014-0054", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:a510e5b8-9554-5af3-a587-d048aaa9bd0d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2014-0054 does not affect version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc. not_affected \u2014 CVE-2014-0054 (XXE vulnerability in Jaxb2RootElementHttpMessageConverter) is NOT present in Spring Framework 6.2.3. The XXE protection was introduced in the upstream Spring Framework release 3.2.8/4.0.2 in February 2014 (commit edba32b309) by Rossen Stoyanchev, long before TuxCare onboarded version 6.2.3. The current code at spring-web/src/main/java/org/springframework/http/converter/xml/Jaxb2R...", "justification": "code_not_present" } }, { "id": "CVE-2014-0225", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:1cc30b02-fe5f-5735-b146-08fdba7902fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-0225 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2014-1904", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:3e2a451b-9dc8-5044-aa78-6d19dc09e3e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-1904 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2014-3578", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:61da1bf1-537b-518c-a238-ff7568deacd5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3578 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2014-3625", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:6a927cc3-3b0a-5526-b152-2dcd3bd2c22a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3625 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2015-0201", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:eeab2907-2ccc-5655-84e0-26a90bc48fa8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0201 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2015-3192", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:e4e1493a-5f6d-5c6c-8ae0-be051a79d832", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3192 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2015-5211", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:3ed700bb-61f0-5057-a735-6de29d2ff386", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5211 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:db79f690-a333-5a9a-85a8-544aea11b5f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2016-5007", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:795c8948-7e5e-59e7-99fe-bde73216acd5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-5007 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2016-9878", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:96412363-4c28-5213-9413-fdda809a6ad7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-9878 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2018-11039", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:a443113a-66c7-56ef-b078-47f2ae4b46c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-11039 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2018-11040", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:5bc3aad3-7058-5806-9918-e14e16884512", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-11040 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2018-1199", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:a0b84615-8be9-5954-9a31-2a33485573bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1199 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2018-1257", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:5b3c4494-de4a-5963-8270-14b784f60170", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1257 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2018-1258", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:0618d191-3ba8-550e-b59d-a1251ed13bf5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1258 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2018-1271", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:90634a61-0ae9-5a83-a12f-90a96d5611f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1271 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2018-1272", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:d1959f05-766c-573c-9ea8-bf3befbab0bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1272 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2018-15756", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:03fd3413-01e1-5cd6-b6e0-63e127be390a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-15756 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2020-5397", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:f68e283c-f8ce-575a-af89-e546436deb99", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5397 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:a05a403a-0a25-515c-90d9-b292d43f0691", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5398 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:bdb48d29-595b-59f6-953b-15b10b193d0b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:9767c1dc-e8f8-5739-bfc1-a93d05ca906a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:bc45a686-fb7e-5178-8ece-8364a5faf3ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:4df20dc1-8fb3-5832-8ca1-b75ad35908fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:450b726e-f2fa-5183-895e-91f457531a7a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:64981c7a-a02f-5a36-8fb6-17b7112c1b58", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:69a8a1f7-0acb-5d53-9dcb-defa32f36d70", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2023-20860", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:e9fe69c6-680b-578e-bbcb-2ce45d5e7cd6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20860 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:5e6e49d9-e9c9-5fff-a9ae-d52205ec778f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:61991961-ecd0-562f-a2a5-c5ec909f8514", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2023-34053", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:10e19a3d-25d7-5132-90c4-9fcc1669dd28", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34053 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:6a486dad-ed2b-571d-9cad-5f3cc9bdf991", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22233 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:91455159-9c1a-5541-9c9a-44917d8b8796", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:f8dd39b0-7876-5ad7-a57d-4e51dd4642fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:9031b239-efe2-543d-a40d-1d0ba796d1bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:39af1b06-6dac-5349-9bd3-a2facb32c975", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:622bd195-b0b9-5b17-b46e-54e558bcd483", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38809 does not affect version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc. not_affected \u2014 CVE-2024-38809 is NOT present in Spring Framework 6.2.3. The vulnerability (regex-based ETag parsing causing DoS via catastrophic backtracking) was fixed in the upstream release before TuxCare onboarded version 6.2.3. The fix commit bb17ad8314b81850a939fd265fb53b3361705e85 by rossen.stoyanchev@broadcom.com replaced the vulnerable regex pattern with an efficient O(n) state-machine parser. The ta...", "justification": "code_not_present" } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:b9ce58b2-aa51-55e2-b5b5-2f40c55ef166", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:bcd14669-7d74-5358-8f54-5f2b5b19b565", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:2cfd29b6-2e7d-5a1f-a57a-c5b954118974", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc. not_affected \u2014 The target Spring Framework 6.2.3 is NOT affected by CVE-2024-38820. The vulnerability involves locale-dependent String.toLowerCase() in DataBinder's disallowedFields protection, which could allow attackers to bypass field access restrictions using locale-sensitive characters (e.g., Turkish 'I' \u2192 '\u0131'). The fix (using Locale.ROOT for consistent case conversion) was authored by the upstream Sprin...", "justification": "code_not_present" } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:d3e83d04-f350-5e04-a502-279ce2352dc9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:ef01430c-d94d-5489-b11e-6154f9089a1d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:51315804-ba7a-56a8-9263-23056b5e4946", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:1cb00598-ada3-574c-b71d-9677765c98fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:d9caf6ae-e96a-5e93-b2f0-d52d81823f56", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:25292faa-4efe-59ab-80d5-f6e0dbbb10dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:be3bdd52-c29b-5691-9a5a-82c86fd73ee8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:23ce6ce3-1e04-5b70-9895-50c4d697215a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:ae932328-fbe3-52a2-a385-8bb99a315caa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:8090eea3-c279-5fa4-bfdc-e5f6ae80ca13", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:f768fd39-b436-5136-8c15-e15555f06d28", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:1ce42d7f-69c0-5269-a8c0-8af5c890a0d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:2d96145d-2ce8-5afa-91d9-ac0d8b29afff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:c52c3627-a229-5d47-8efc-e8f1d2b17bfb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:540af3fb-3459-5cc8-b8c0-0cac60f4f8f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:a84b6fa7-d582-5da0-ac03-58c1737d21db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:efd668f0-8bc7-5c7c-aa4e-a318ee28ea24", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:c5247f49-62fa-5f1d-a314-749b388e1ebd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:75397c52-73a7-5e9b-8f60-12001ee6bdc4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:94e7f613-1e40-52bc-aec2-9796ffe346ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:7bfecd23-9ddb-597f-bd6f-d5a905616b24", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:23fddce0-cfdd-5969-8c84-95d0467c4d63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:07d56511-57a5-5b0e-93c7-5d832639a207", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:e09c529c-3ce0-5a12-bc99-d8adb76aaeca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:39f421c7-b012-58a4-a1da-25b04541da6a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:385010b2-cf8d-5f97-9b81-f4bf278a6c4d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:0d2b62d3-f517-56fa-9b3f-35eb4ec11777", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:8f246d81-b3c4-539b-a6c7-ec7ce4bfa951", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:24de5640-12da-5076-9d49-6836bc8b2454", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:86939873-a490-56da-809b-0f21c237790a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:c53d33d2-be98-5deb-9d38-42c200b46223", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:f3a6229a-a429-5412-b982-8095e27ad2f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:eca2d4d4-8286-5eb5-aa49-f74fdddf035c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:5064844f-a0df-5446-87c1-b007409a17f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3" } ] }