{ "@id": "urn:uuid:0cec166c-53ff-43e3-a8bf-84545c865659", "role": "Document Creator", "author": "https://tuxcare.com", "version": 31, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-29T11:54:59.842399+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T21:27:55.132553+00:00", "status_notes": "Vulnerability CVE-2009-1190 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2009-1190" }, "action_statement": "Vulnerability CVE-2009-1190 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T21:34:36.358672+00:00", "status_notes": "Vulnerability CVE-2010-1622 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2010-1622" }, "action_statement": "Vulnerability CVE-2010-1622 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T21:30:41.069534+00:00", "status_notes": "Vulnerability CVE-2011-2730 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2011-2730" }, "action_statement": "Vulnerability CVE-2011-2730 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-29T02:23:11.597840+00:00", "status_notes": "Vulnerability CVE-2011-2894 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2011-2894" }, "action_statement": "Vulnerability CVE-2011-2894 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T21:45:22.088279+00:00", "status_notes": "Vulnerability CVE-2013-4152 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2013-4152" }, "action_statement": "Vulnerability CVE-2013-4152 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T21:27:55.132553+00:00", "status_notes": "Vulnerability CVE-2013-6429 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2013-6429" }, "action_statement": "Vulnerability CVE-2013-6429 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T21:25:11.687376+00:00", "status_notes": "Vulnerability CVE-2013-6430 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2013-6430" }, "action_statement": "Vulnerability CVE-2013-6430 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T21:45:22.088279+00:00", "status_notes": "Vulnerability CVE-2013-7315 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2013-7315" }, "action_statement": "Vulnerability CVE-2013-7315 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T21:22:31.131193+00:00", "status_notes": "Vulnerability CVE-2014-0054 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2014-0054" }, "action_statement": "Vulnerability CVE-2014-0054 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T21:48:07.176896+00:00", "status_notes": "Vulnerability CVE-2014-0225 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2014-0225" }, "action_statement": "Vulnerability CVE-2014-0225 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T21:45:22.088279+00:00", "status_notes": "Vulnerability CVE-2014-1904 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2014-1904" }, "action_statement": "Vulnerability CVE-2014-1904 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T23:41:42.084809+00:00", "status_notes": "Vulnerability CVE-2014-3578 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2014-3578" }, "action_statement": "Vulnerability CVE-2014-3578 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T21:42:13.036680+00:00", "status_notes": "Vulnerability CVE-2014-3625 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2014-3625" }, "action_statement": "Vulnerability CVE-2014-3625 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T21:22:31.131193+00:00", "status_notes": "Vulnerability CVE-2015-3192 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2015-3192" }, "action_statement": "Vulnerability CVE-2015-3192 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T21:27:55.132553+00:00", "status_notes": "Vulnerability CVE-2015-5211 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2015-5211" }, "action_statement": "Vulnerability CVE-2015-5211 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2016-1000027 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "vulnerability": { "name": "CVE-2016-1000027" }, "action_statement": "Vulnerability CVE-2016-1000027 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required" }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T21:27:55.132553+00:00", "status_notes": "Vulnerability CVE-2016-5007 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2016-5007" }, "action_statement": "Vulnerability CVE-2016-5007 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T21:20:09.538096+00:00", "status_notes": "Vulnerability CVE-2016-9878 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2016-9878" }, "action_statement": "Vulnerability CVE-2016-9878 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-29T00:40:33.053070+00:00", "status_notes": "Vulnerability CVE-2018-11039 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2018-11039" }, "action_statement": "Vulnerability CVE-2018-11039 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T22:44:11.275398+00:00", "status_notes": "Vulnerability CVE-2018-11040 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2018-11040" }, "action_statement": "Vulnerability CVE-2018-11040 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-29T00:51:30.888148+00:00", "status_notes": "Vulnerability CVE-2018-1199 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2018-1199" }, "action_statement": "Vulnerability CVE-2018-1199 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T21:25:11.687376+00:00", "status_notes": "Vulnerability CVE-2018-1257 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2018-1257" }, "action_statement": "Vulnerability CVE-2018-1257 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-29T02:48:12.612717+00:00", "status_notes": "Vulnerability CVE-2018-1258 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2018-1258" }, "action_statement": "Vulnerability CVE-2018-1258 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-29T00:16:38.201074+00:00", "status_notes": "Vulnerability CVE-2018-1270 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2018-1270" }, "action_statement": "Vulnerability CVE-2018-1270 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T21:30:41.069534+00:00", "status_notes": "Vulnerability CVE-2018-1271 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2018-1271" }, "action_statement": "Vulnerability CVE-2018-1271 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T21:22:31.131193+00:00", "status_notes": "Vulnerability CVE-2018-1272 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2018-1272" }, "action_statement": "Vulnerability CVE-2018-1272 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-29T00:16:38.201074+00:00", "status_notes": "Vulnerability CVE-2018-1275 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2018-1275" }, "action_statement": "Vulnerability CVE-2018-1275 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T22:02:19.515243+00:00", "status_notes": "Vulnerability CVE-2018-15756 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2018-15756" }, "action_statement": "Vulnerability CVE-2018-15756 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-29T03:58:30.759519+00:00", "status_notes": "Vulnerability CVE-2020-5397 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2020-5397" }, "action_statement": "Vulnerability CVE-2020-5397 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T23:49:59.024011+00:00", "status_notes": "Vulnerability CVE-2020-5398 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2020-5398" }, "action_statement": "Vulnerability CVE-2020-5398 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T21:38:45.879676+00:00", "status_notes": "Vulnerability CVE-2020-5421 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2020-5421" }, "action_statement": "Vulnerability CVE-2020-5421 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2021-22060 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2021-22060" }, "action_statement": "Vulnerability CVE-2021-22060 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2021-22096 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2021-22096" }, "action_statement": "Vulnerability CVE-2021-22096 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2021-22118 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2021-22118" }, "action_statement": "Vulnerability CVE-2021-22118 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-22950 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2022-22950" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-22965 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2022-22965" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-22968 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2022-22968" }, "action_statement": "Vulnerability CVE-2022-22968 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-22970 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2022-22970" }, "action_statement": "Vulnerability CVE-2022-22970 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-22971 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2022-22971" }, "action_statement": "Vulnerability CVE-2022-22971 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-29T00:40:33.053070+00:00", "status_notes": "Vulnerability CVE-2023-20860 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2023-20860" }, "action_statement": "Vulnerability CVE-2023-20860 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2023-20861 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2023-20861" }, "action_statement": "Vulnerability CVE-2023-20861 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2023-20863 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2023-20863" }, "action_statement": "Vulnerability CVE-2023-20863 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-29T02:36:49.908127+00:00", "status_notes": "Vulnerability CVE-2023-34053 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2023-34053" }, "action_statement": "Vulnerability CVE-2023-34053 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-29T03:48:46.502543+00:00", "status_notes": "Vulnerability CVE-2024-22233 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2024-22233" }, "action_statement": "Vulnerability CVE-2024-22233 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-22243 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2024-22243" }, "action_statement": "Vulnerability CVE-2024-22243 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-22259 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2024-22259" }, "action_statement": "Vulnerability CVE-2024-22259 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-22262 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2024-22262" }, "action_statement": "Vulnerability CVE-2024-22262 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-38808 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2024-38808" }, "action_statement": "Vulnerability CVE-2024-38808 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-38809 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2024-38809" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-38816 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2024-38816" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-38819 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2024-38819" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-38820 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer. not_affected \u2014 Version 5.2.10.RELEASE does not contain the vulnerable code pattern described in CVE-2024-38820. This CVE specifically affects the fix for CVE-2022-22968, which introduced case-insensitive field matching using String.toLowerCase() without a Locale parameter. The target version uses case-sensitive matching and does not call toLowerCase() in its DataBinder field validation logic. Therefore, the l...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2024-38820" }, "impact_statement": "not_affected \u2014 Version 5.2.10.RELEASE does not contain the vulnerable code pattern described in CVE-2024-38820. This CVE specifically affects the fix for CVE-2022-22968, which introduced case-insensitive field matching using String.toLowerCase() without a Locale parameter. The target version uses case-sensitive matching and does not call toLowerCase() in its DataBinder field validation logic. Therefore, the l..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-29T00:40:33.053070+00:00", "status_notes": "Vulnerability CVE-2024-38828 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2024-38828" }, "action_statement": "Vulnerability CVE-2024-38828 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-22233 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2025-22233" }, "action_statement": "Vulnerability CVE-2025-22233 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-29T03:39:22.988337+00:00", "status_notes": "Vulnerability CVE-2025-41234 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer. not_affected \u2014 Spring Framework 5.2.10.RELEASE is not affected by CVE-2025-41234. The vulnerability involves unencoded double-quote characters in a quoted-printable encoded filename parameter when using non-ASCII charsets. This vulnerable feature (dual-parameter output with quoted-printable encoding) was introduced in Spring Framework 6.0.10 (February 2023), after the target version 5.2.10.RELEASE (2020). The...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-41234" }, "impact_statement": "not_affected \u2014 Spring Framework 5.2.10.RELEASE is not affected by CVE-2025-41234. The vulnerability involves unencoded double-quote characters in a quoted-printable encoded filename parameter when using non-ASCII charsets. This vulnerable feature (dual-parameter output with quoted-printable encoding) was introduced in Spring Framework 6.0.10 (February 2023), after the target version 5.2.10.RELEASE (2020). The..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-41242 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2025-41242" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-41249 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2025-41249" }, "action_statement": "Vulnerability CVE-2025-41249 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-41254 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2025-41254" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-22735 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-22735" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-22737 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-22737" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-22740 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-22740" }, "action_statement": "Vulnerability CVE-2026-22740 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-22741 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-22741" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-22745 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-22745" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41838 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-41838" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41839 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-41839" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41840 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer. not_affected \u2014 Version 5.2.10.RELEASE is not affected by CVE-2026-41840. The vulnerability targets the PartGenerator/MultipartParser multipart parsing implementation introduced in Spring Framework 5.3.0. Version 5.2.10 (released October 2020, before 5.3.0) uses a completely different Synchronoss-based multipart parsing architecture that does not have the vulnerable BodyToken buffering mechanism. The vulnerabl...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-41840" }, "impact_statement": "not_affected \u2014 Version 5.2.10.RELEASE is not affected by CVE-2026-41840. The vulnerability targets the PartGenerator/MultipartParser multipart parsing implementation introduced in Spring Framework 5.3.0. Version 5.2.10 (released October 2020, before 5.3.0) uses a completely different Synchronoss-based multipart parsing architecture that does not have the vulnerable BodyToken buffering mechanism. The vulnerabl..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41841 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-41841" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-21T17:11:15.907299+00:00", "status_notes": "Vulnerability CVE-2026-41842 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer, and is fixed in 5.2.10.RELEASE-tuxcare.2.", "vulnerability": { "name": "CVE-2026-41842" }, "action_statement": "Vulnerability CVE-2026-41842 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer, and is fixed in 5.2.10.RELEASE-tuxcare.2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41843 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-41843" }, "action_statement": "Vulnerability CVE-2026-41843 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41844 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-41844" }, "action_statement": "Vulnerability CVE-2026-41844 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41845 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-41845" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41846 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-41846" }, "action_statement": "Vulnerability CVE-2026-41846 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41847 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-41847" }, "action_statement": "Vulnerability CVE-2026-41847 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41848 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-41848" }, "action_statement": "Vulnerability CVE-2026-41848 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41849 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-41849" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41850 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-41850" }, "action_statement": "Vulnerability CVE-2026-41850 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41851 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-41851" }, "action_statement": "Vulnerability CVE-2026-41851 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41852 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-41852" }, "action_statement": "Vulnerability CVE-2026-41852 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41853 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-41853" }, "action_statement": "Vulnerability CVE-2026-41853 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41854 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-41854" }, "action_statement": "Vulnerability CVE-2026-41854 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41855 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-41855" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-29T11:54:59.842399+00:00", "status_notes": "Vulnerability CVE-2026-47883 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer. not_affected \u2014 The target Spring Framework 5.2.10.RELEASE is not affected by CVE-2026-47883 because the vulnerable component (UrlHandlerFilter) does not exist in this version. UrlHandlerFilter was introduced in Spring Framework 6.2.0-M2 (May 2024), approximately 3.5 years after the 5.2.10.RELEASE version (October 2020). Comprehensive searches across the codebase confirm no UrlHandlerFilter class exists, and n...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-47883" }, "impact_statement": "not_affected \u2014 The target Spring Framework 5.2.10.RELEASE is not affected by CVE-2026-47883 because the vulnerable component (UrlHandlerFilter) does not exist in this version. UrlHandlerFilter was introduced in Spring Framework 6.2.0-M2 (May 2024), approximately 3.5 years after the 5.2.10.RELEASE version (October 2020). Comprehensive searches across the codebase confirm no UrlHandlerFilter class exists, and n..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47884 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-47884" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T18:40:55.741562+00:00", "status_notes": "Vulnerability CVE-2026-47885 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-47885" }, "action_statement": "Vulnerability CVE-2026-47885 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47886 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-47886" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47887 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-47887" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47888 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-47888" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-28T18:40:55.741562+00:00", "status_notes": "Vulnerability CVE-2026-47889 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-47889" }, "action_statement": "Vulnerability CVE-2026-47889 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-08T08:18:33.187222+00:00", "status_notes": "Vulnerability CVE-2026-47890 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer. Spring Framework 5.2.10.RELEASE is not affected by CVE-2026-47890. The vulnerability concerns SSE (Server-Sent Events) view fragments, a feature introduced in Spring Framework 6.2.0+. Version 5.2.10.RELEASE predates this feature entirely - no Fragment class, FragmentsRendering, SseEventFormatter, or SSE fragment formatting code exists in this version. The affected code paths were never present in the 5.2.x release line.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-47890" }, "impact_statement": "Spring Framework 5.2.10.RELEASE is not affected by CVE-2026-47890. The vulnerability concerns SSE (Server-Sent Events) view fragments, a feature introduced in Spring Framework 6.2.0+. Version 5.2.10.RELEASE predates this feature entirely - no Fragment class, FragmentsRendering, SseEventFormatter, or SSE fragment formatting code exists in this version. The affected code paths were never present in the 5.2.x release line." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47891 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-47891" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47892 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-47892" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47893 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-47893" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59280 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-59280" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59281 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-59281" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59282 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-59282" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59283 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-59283" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-10-29T10:21:18.524281+00:00", "status_notes": "Vulnerability CVE-2026-59313 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer. not_affected \u2014 Spring Framework 5.2.10.RELEASE is not affected by CVE-2026-59313. The vulnerability specifically targets the functional web framework's Server-Sent Events support (ServerResponse.sse() / SseServerResponse), which was introduced in Spring 5.3.0 and does not exist in version 5.2.10. The vulnerable component is absent from the target codebase.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-59313" }, "impact_statement": "not_affected \u2014 Spring Framework 5.2.10.RELEASE is not affected by CVE-2026-59313. The vulnerability specifically targets the functional web framework's Server-Sent Events support (ServerResponse.sse() / SseServerResponse), which was introduced in Spring 5.3.0 and does not exist in version 5.2.10. The vulnerable component is absent from the target codebase." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.1" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59314 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer.", "vulnerability": { "name": "CVE-2026-59314" } } ] }