{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2bda530e-f2f8-5d17-b3e3-90d3a9f4a45f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context", "purl": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6", "version": "5.1.20.RELEASE-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b9ac65e1-b4a9-5154-b22f-0839431d8d5a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e1d789de-feff-5d08-b04d-52ecbcfe747c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:535d4321-b547-5318-9470-6a9c4314a415", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:67a7918f-4524-5600-aa1c-1ec46126afb6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:cb70972d-1df9-5fb1-aa3e-304ff6e294fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:4b966300-5a96-5957-a317-aa5721681184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3c9dccd7-ee3e-5171-acc4-1623ee578f30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:32ec6de4-4605-549e-a852-6bb319674ad0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6b96b61c-bb91-5b9c-8520-5e12de16f63f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:1b6a8227-ee3c-54c1-b75a-2283f60a1cd5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6db2c163-797a-541c-8181-56be67e7d0b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b500328a-cc4b-591a-8f0c-9e5833363ea0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:9b50c8d1-4319-517b-b6fe-7abf474707eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:12d591d4-fe6d-5333-9693-bdb250341812", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:61795497-2c0e-563e-9368-2d305421339a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e166ab7e-232e-5f70-b61e-e785a12a7f6b", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-context 5.1.20.RELEASE-tuxcare.6." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:0126050d-bbff-5eb8-a4ca-970695af345f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:26d79406-c683-5c5f-ba77-11e6dd318d85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:f2d6d6b8-20e3-5f42-ba00-d72bbf5c162a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e43c8866-8e66-5636-ac44-497ef2b18866", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:414e575f-a2f0-5e4f-b632-4b1532ce497e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:0d7d777e-a454-5e87-bdc5-2a253f7eea45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:fe70ee51-dbf0-54d9-bb7e-b9409513fcc1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:74fddd5f-80db-5f00-92e9-5ff1fbce021a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b9202002-77a8-5225-816b-53eed0dcf37d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3d75e920-c564-5fc9-b780-36ac8f6488b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ed3e6783-a9bf-5373-9fd0-734944577517", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3c53876b-0f16-520a-918d-c80e9b01ca79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e64afecf-0010-5c6b-82c5-87b5e89dcc95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:551c317c-7024-5d46-8074-c4c681d64eb2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c2e38d92-f983-5503-a58e-e7b71f3873ba", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library).", "justification": "code_not_present" } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:37635583-b7d8-5bba-8394-1731530d9e12", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6a931c84-9da8-5a35-a6fa-1a76d0019017", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3de3fb9a-6444-5be9-b715-4ead52b6f884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2a8e034c-ec06-5d91-9aba-212ef09c8c08", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:653708bd-2e83-5bab-982d-69356285d0d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:31b03ce0-4a42-50ab-b8d3-b84e8c996601", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:173f88d9-67b5-544e-981d-6bcf3092352b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:66dbb8a1-f306-5133-a1cc-40b5166cdb62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:d0add9a2-ff9d-556f-b5d8-7e34d3bc2f82", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:f818b627-430a-53d0-9af6-1778e8ed8d78", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:878d5fa1-cabe-5323-95c3-5d1fe3806524", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:adeb57dc-4301-5ec4-95cf-3c99e746acca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2dca7ec5-f75c-5722-8ac8-f46a75fb6591", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code.", "justification": "code_not_present" } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e6f20299-e74e-538f-8162-022627d30769", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6fc72a7a-c7d1-58bf-959a-c8ac042700ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ef8b1767-bb56-5979-b472-2a1e81cc868d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:85985f20-deb0-525e-9051-a844e57c4136", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b9608607-0b7a-5976-a9e4-d6ee5df36888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:956e3f03-20a5-5a45-9004-1fae456e1009", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:96043afa-b5b7-58fe-95bf-246556c56757", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:00595def-af6a-5c14-bf2f-2da9af93a78d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:be31171f-628c-520e-a456-091d5341d074", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2192be9b-d943-5f32-a713-086120ea3641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ceab76b1-edd8-55be-91f1-a7e2c5615f99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2d86fe96-71a2-5d5a-8e4a-325c746c7967", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-context." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.6" } ] }