{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:35a2d124-233b-5f7c-a3c3-543a3211fd73", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4", "version": "5.1.5.RELEASE-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:b4d17cc5-c44c-5d4c-983c-4fdb5a68d230", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5d42527c-0d02-5b8d-9270-9649b7c54572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5e7d6e00-6a05-5a31-b4f6-f7669a32380e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:9c9e98f1-a533-5e09-b50e-5c64b9dc4bc9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ebd2b4ea-7788-5662-9122-074f0ead5759", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:3e02107d-228e-58e8-86b7-821b04e94940", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:65f65fb1-22f3-55a0-8fa8-b6cd38244f8d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:d9b5cf89-f92b-5cb3-bea4-07c2d7295f99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:1ef4bd89-cb3a-5599-b974-38dd555c4202", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:3ed87665-b067-586a-8cd1-14b003091297", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:8ba210e8-4b89-5ca1-9c44-08b6c19ac87d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:99d6bfc7-9b57-5298-b619-c5ffff76f0ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:7fa4d980-6db6-5108-a436-114fdc536c99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:decfdfa1-afc7-5535-8979-0e0edf182063", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:58ee694d-69c2-56a9-bb77-e021189d8022", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e62c083d-d38d-534c-aae1-e29280235d83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:fdef82bb-4fd6-5dfc-9850-d5a01483593f", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-core 5.1.5.RELEASE-tuxcare.4." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:fee36c3c-90d5-597d-a2bf-67ae74211d0e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:0a583d4e-8ef0-5e0d-bc59-3d2b9d4c8e88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:b8d5e2d0-f905-5301-a77c-b428521a9694", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:78c8912b-61d6-5192-a02d-7bd7dfdf221f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core, and is fixed in 5.1.5.RELEASE-tuxcare.5." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a57ea982-4eda-5354-bca2-cd735a0e99c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:4a3671bc-67d7-5949-af82-de1d0dd2a2c2", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core. not_affected \u2014 Spring Framework 5.1.5.RELEASE is not affected by CVE-2025-41234. The vulnerability exists in 6.x versions where Q-encoded filename parameters fail to encode double-quotes, allowing header injection. Version 5.1.5 uses a different architecture that only outputs RFC5987-encoded filename* parameters (not Q-encoded filename parameters), and RFC5987 encoding properly percent-encodes double-quotes a...", "justification": "code_not_reachable" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a9b609e2-25e6-5542-9f3f-11d809353565", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:9339177d-ea5d-5c74-a3b5-8c8cb355cf8d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:0bf8e10d-8a73-5345-b199-8350fd9ab9a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ac5d5b65-d99e-54f1-914f-fa770dc62e47", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:3b260093-b670-5ac7-9f8f-49b150c389ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core, and is fixed in 5.1.5.RELEASE-tuxcare.5." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:79bd3348-5da7-58f1-a252-b99a1f9db579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e6d89845-c88e-54c9-a47f-09fc0b44be4d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:195d241a-1db9-5fbc-943d-ae26560b97f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f0c42393-00e9-542e-af48-9e31e5ff1547", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:1929e0a5-7d5c-5f10-bc38-af3464caef27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:820e18d6-fd26-5c87-ac33-225c4440204f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:0b354f09-61df-5c29-aa26-0174e1c9c189", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:76d85c30-b1e3-55ed-8d94-69be1cea9054", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:60113b93-d1bb-55d9-abef-77636d0cd8cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:d3b1b686-83a9-52da-bbf0-a18cee5cab04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c3605534-2b0a-5435-97b6-0a7ffc91b088", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e800f4b1-3ec0-5378-84ce-a361fb153f98", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e40311a8-c3e6-5d12-b329-6f4ed2b76872", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core. Spring Framework 5.1.5.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and does not contain the vulnerable RouterFunctionDsl.filter API." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:11ec8ae4-b2ba-5c51-9937-d74432e31f7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:4bb50417-7c72-597c-8be9-af3a238c93d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:7e3df0c5-28ee-5c53-ab04-8d54f8a14671", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:25c89eae-bd87-56ad-a2d2-d93970f3dcff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:62502ea4-711a-5343-aa72-f589857dc01b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5dd7b35f-4831-570b-9b11-f142b01308f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:96971184-31b5-5432-8164-80b2fe31d1b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:d9919224-84af-5ea6-b024-6f18a6f7144a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:1bdd60b3-0869-55f5-8266-f40eff970516", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:38e08dda-bf2f-5b9d-9608-c05d0dd6630d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ad735c8f-c6e7-52f9-a59b-cf61962c3ef4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core, and is fixed in 5.1.5.RELEASE-tuxcare.5." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5a62cca4-d25f-5867-a437-d4819a212553", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core, and is fixed in 5.1.5.RELEASE-tuxcare.5." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a760d8af-3173-5d75-9915-01c40aff0c32", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:58a891dd-9c96-5d24-aa85-416f2a51a488", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5dc9cec6-d740-5cbb-9838-65768cd0e092", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a9cc82da-f857-5903-8b0c-5f2d9f205b1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core, and is fixed in 5.1.5.RELEASE-tuxcare.5." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:8aa97a55-5314-57fd-ab0c-b5d27121e4f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:fb9b5870-ec4c-50d0-a240-05cc530f4ffa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-core, and is fixed in 5.1.5.RELEASE-tuxcare.5." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@5.1.5.RELEASE-tuxcare.4" } ] }