{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:88303a4c-8030-50c7-89c0-96d9185a7c44", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "name": "spring-websocket", "version": "5.1.20.RELEASE-tuxcare.5", "purl": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:bec62775-632d-5e5e-a9fc-456ef5ad8cff", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:034cf9ea-74f9-5e7a-b4f9-b4754a31bfb4", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3a100a36-dcc7-57c3-b3e4-9285f6d208fd", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8d7e644f-6a6e-55e6-ae5f-5c81cb35fcbc", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:af57cc35-881d-50f3-846f-a3973ebb9176", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f68987e1-509c-5863-bde0-27befa3a8a63", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f0454501-c4cd-55af-9b4c-e527f3d82940", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c9340700-7512-53e4-b507-fe7779bf840f", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b4fd6b50-62af-589e-94a1-f2d2380f1f0d", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:547f1d80-40bd-5a65-8c34-f45ca42854ad", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d8f8a033-2ec5-5962-b249-bf1cbd943db9", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:aa027715-f0f5-5458-bc09-0d604bb5ee02", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bf15818d-439f-5709-bdc5-18530947376b", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8d0a0118-d57b-57f9-9374-df282e59c62c", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:05df96a0-2830-5d44-a9c2-ccb69fe520d1", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2990a921-dfc7-5427-bdc1-d3a1ff87e1c5", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-websocket 5.1.20.RELEASE-tuxcare.5." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:705cd9da-4aba-529e-88b4-30b627864efd", "id": "CVE-2024-38816", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2bc33cee-4e88-530e-8b95-d284d2aabf35", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:45537344-5c02-5fc0-8c3a-9552ed11b9f1", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cd618aba-123a-50f4-94b8-89adccbaadab", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cff785b4-8c37-508d-9cac-ca18c3db9c52", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2263e997-5963-5ab3-a729-d0b7e44638df", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5b328ecd-7050-531b-9bf7-efc4ef1fb375", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:217178df-c849-5a4d-8df9-3c1b80449907", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a973f096-cbdb-5c87-ad8d-bee94056e583", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f9f78b0b-4b42-595b-addd-fddd9ac69792", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:622d6e5b-2523-5b1e-934f-30715707181c", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0ac7e760-0136-53de-b09b-3338b124e1a4", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:efe32d4e-fc9f-5714-9c57-3d34db35e6b2", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8e81c88e-ee0e-5d40-a1da-896cd28aa5fd", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:403ad767-c855-5024-814e-aeaab96179d4", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9860000c-d3a0-5036-a363-1ebb37c8a45c", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:85029da3-7b3b-5524-9781-520c5d9dc310", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e3e06f10-2ee8-5a49-8748-3b862e69d64e", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:29862656-1fca-5d15-bb23-da9f41e1a671", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:008b8960-6eca-56ac-a7a3-8179264f6a32", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:875621b2-6c65-5ff9-a02b-7c04a2f7c016", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9cc64de4-8b4e-5367-b4d1-83f1dbae1113", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c299fe98-0ea8-5a71-b983-da512942b01e", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b1858c47-82d2-551f-883a-aa89f8f258ae", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:789a00c0-c75a-5bd8-b1b0-15733027c0f5", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:08fd435f-4b1c-50ce-adb9-c14a1a9bc302", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:dca21670-e17e-51e9-9c1b-d08448eae191", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:dddd540f-ee94-5949-8775-c51b73402de6", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:44f02558-d462-53c3-b838-d85958476442", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2f0cb15b-03d3-570c-acc3-b68d40db2b1d", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cfc8fab3-b5ac-5739-8f06-ced2596448f4", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c16a2f8e-0b1f-5ba4-a204-bf44b1838c2d", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1ecbf7c5-5454-574a-9caf-54ff8db3b49d", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8a5fcb16-324a-5afd-b988-68b4054adc48", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c18de63b-665f-5bc4-8d0a-f495b6cf64d5", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:43ffafe4-118d-5597-bb4e-4905d7198e77", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4e54f77a-f2e7-5543-86e9-c50aef45cfb9", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b269b81e-bf36-5e4f-9743-f35e3eaab0ed", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:db16c7eb-66c4-5b01-ba2f-a417272f5907", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1333c5c7-d8fd-58e5-b6b0-0dbb8ce62707", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.5" } ] }