{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:92de822e-f011-5d03-b6ec-39f2779ab3f0", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5", "version": "5.2.0.RELEASE-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c2d31059-d7d2-57b2-9a7c-af4cb98b48f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5397", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0ae0d7b5-ea82-5f38-aeef-b537bd29014d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5397 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5db09b78-4108-570b-bcd2-92a5110dbcb1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:62b6bab7-075d-5edf-8344-6abe933a1e06", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:eb39c75e-2c03-54d1-942e-d9685689d1ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ed153687-5952-59bf-b1ec-b42a7d2c1617", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a6e51085-cd32-52ca-a2aa-d0bc43ada1f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:073500dd-919c-5cca-95d9-a9ea1bbfd77c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c0ac1c2d-e1fd-589b-8e5c-f0c0ad31aa2a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e76c7a52-585f-555d-8a59-8b1cccf3b163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6c82884e-e895-53ea-b2ae-6125c2dac001", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b4b25288-5ada-5502-b453-bad0e79fc244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:033a06d6-6da6-56a3-a826-f150c2bb719b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1483e028-f573-5bb8-a039-995de14da9c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:eee61d44-de6b-54e3-834c-dc7d40d07500", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5df5a62b-8957-58b0-acf1-cc49be04b1fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f4962dfc-4246-5d8d-b1d2-71913b2f70f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:dcfb8446-504a-5529-bb9d-9d0596f55e79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b9ef698c-4f5d-54ac-8aa7-bdd01c110bc7", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-core 5.2.0.RELEASE-tuxcare.5." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9182c486-afc7-5256-be91-152c3a96b614", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core, and is fixed in 5.2.0.RELEASE-tuxcare.6." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0c15cad1-8133-5bdd-9bba-dd253c59dcee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core, and is fixed in 5.2.0.RELEASE-tuxcare.6." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e8b62e6a-8018-5721-94a2-027ba43dc08e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c9b38ab4-4c2b-5517-8e56-47bed7ab6694", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ce8fc475-6bb3-5329-8ab4-6d201f069db3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0da77e32-0269-5441-b99b-dc12caf9354f", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41249 is a false positive for org.springframework:spring-core 5.2.0.RELEASE-tuxcare.5." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:dfb36bdf-74ac-573f-b78d-dfe7c5f4f14b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5643c5b5-87e9-5b12-bf6a-013fc618c3c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:098a2663-d2be-5006-9a1a-d3d48bddf71c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core, and is fixed in 5.2.0.RELEASE-tuxcare.6." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:2eccc48c-0e8d-5203-9a99-39f92900e549", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ab4a6a35-a6ce-5752-8a31-c24e4754f854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:44eafbac-f5b2-56c6-a729-323f03634bcd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:58ee7fb2-7ac6-5f8e-8e49-2ef1e1fbf8f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f47302fa-edda-5552-a5a0-9a1c5fd734e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0389852f-ee91-5a99-a8d5-f6b487db9452", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f87a4529-bf0f-5357-848e-1cf6296dff1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:fadfa494-3f1c-5d26-8515-382cef68475f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9871d05c-ba18-50ca-95c9-0eec13a7c905", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8394ca05-fdea-5e95-9fac-1b06e7a46d79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9d618ca0-38ca-50e9-83fe-4ec392c24008", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:fd3110af-ca7d-58e6-9283-229da4b5de73", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:080b71f1-ea50-52b3-a041-85186555d873", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6b887e08-c254-525c-ae91-f06cb3a25c96", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7a58a99e-a1c8-5790-b4ef-93e7681e3da1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:71d52af2-f13d-5807-a83a-e728dd7c6eab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b581609d-88c2-577f-b431-ccf97a98ee24", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:90de5fb4-bf89-532a-979a-f769e40b7782", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a747c3db-3e46-5a89-980a-d54e37bf67ac", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core. not_affected \u2014 Target version 5.2.0 uses a fundamentally different multipart parsing architecture than the vulnerable code introduced in Spring Framework 5.3.0. The CVE-2026-41853 vulnerability affects the new native Spring multipart parser (MultipartParser and DefaultPartHttpMessageReader) introduced in version 5.3.0, which does not exist in version 5.2.0.", "justification": "code_not_present" } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6a32bac5-4423-524e-8525-e6882bc2dea9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1d41f2aa-5601-5166-90da-fe3101284188", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8c2f01ab-dbd7-5fb6-8843-4f8dc3ecb267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:acfb8d26-5555-5ae0-852a-13e92d8e58cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core, and is fixed in 5.2.0.RELEASE-tuxcare.6." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:13b40d59-dcad-5565-a187-88d335b17694", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core, and is fixed in 5.2.0.RELEASE-tuxcare.6." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:872fa616-2ddb-5d7a-8e24-ea22b2694d5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:59b9fefc-84c6-5770-90e9-71861820cc17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:22510934-ead1-5cbc-b3c3-387e179febc2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f454bac3-4115-5db6-b132-2f49d9a460bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7398dede-cae7-5ae7-8f79-721fe84e5a6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e1fadcc5-98c2-5c4b-8889-6ebf595ad434", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core, and is fixed in 5.2.0.RELEASE-tuxcare.6." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:aa02d820-ce10-52cf-beb0-4187066a28e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:bb38432e-a88a-524e-a480-e587dc0a3fd1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-core, and is fixed in 5.2.0.RELEASE-tuxcare.6." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.5" } ] }