{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:33a7d3ee-22e3-5d21-a727-356095adba8c", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6", "version": "5.2.0.RELEASE-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:954f0487-44fd-52b0-b1d7-1e25a41f9659", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5397", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:40cbaf73-6d3c-5685-9fd7-4f3e93f26c1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5397 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:0f1a5683-0c8c-5d58-af54-b1ef5d779108", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3819dd55-62b1-5de9-a8a0-115646047ea6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:14ab9bde-9869-5744-84b4-07d9e89d1dbc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:d6f6fddf-4440-56e6-96ab-6407ef2d59f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:52cb7dd8-4d0f-58ad-8029-11db85f1f20c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:0c50d10f-b001-5c9a-8717-222336ea6ce7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ac7dc639-d133-5b8b-9a4b-977bbfcee3ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c5529f6f-719e-5a53-9009-511c733a541b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:350b87fa-a236-529d-9527-0fc2897f79aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a95b9103-8193-53e5-a0e6-70d66e673976", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:f9edce25-2af3-5e1e-a6fa-a1eb8979a632", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:0c01fc07-1e43-524f-b372-f6e52e45ea8f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ec104e67-b4d6-5180-928f-8ddb598a7975", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:aa993dbc-5f6b-5fa9-8912-8003bb52d768", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:76a1c6d5-844b-5443-9845-12c4c814b91f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:d668a590-ed6a-5252-a762-802c963eae28", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b84c5c53-62f4-5d0d-a42a-0d85a25953c0", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-core 5.2.0.RELEASE-tuxcare.6." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:9c3776a4-5b93-53ed-b80f-2250984b220a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:11ecdaa0-939a-566a-be89-1b9b622f1547", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:28ab4b73-ce70-5988-a5fd-f3ac4393f534", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3d36dcb1-3400-5c42-9deb-653827f876bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a36a8451-8236-5009-8fab-7492aaaae88a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a454cc5b-3069-5c18-834b-ced99195c043", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41249 is a false positive for org.springframework:spring-core 5.2.0.RELEASE-tuxcare.6." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a16475cd-962c-59ef-86d3-450166f7e4af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:0033824a-0c16-5b24-b411-52602ed4f25e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:9be1f600-12d4-574a-836a-3bf58beca605", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:924b1086-f88f-515b-a019-1c4d3b3ddb24", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:691e4617-9ef2-51cf-b9bf-593ce532fc9c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c798d011-0bf7-5b8b-a993-3c2e9b9d5e0f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3256abd0-298b-5b0d-96cf-b1ff33eeb69e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:1621b3e0-306d-5df2-b8d5-43dc96b05578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:bfc7dc4e-0271-50bb-82c5-c5598d03b233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:8278fd36-4d50-5150-bd7c-995f86539775", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:0f10f936-5b31-5eb0-b70c-1aa8464990a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:5352cdb0-80e7-5907-a661-203d53530b32", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ce5ee50c-ab59-57f1-a47c-b0eaae9c581c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b81553b6-f950-541f-8d93-506e4b03f2d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:7396a8bb-d49c-53c5-80be-cc27ea77aeee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:916e0434-da5f-5039-adaf-ecfa541ba814", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:fdfa9693-a910-5d60-8a65-5ad08870f616", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:38abf057-f0ee-573a-984c-de7ea73cd5df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:906e9021-3bda-5760-abde-f2905cccbbf0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:724c49af-89b9-5a42-af62-64e774518e64", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:91b7f173-98c7-5490-9085-9b37d1ddf72f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2de4f1e6-622b-5def-9217-c47e07524682", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core. not_affected \u2014 Target version 5.2.0 uses a fundamentally different multipart parsing architecture than the vulnerable code introduced in Spring Framework 5.3.0. The CVE-2026-41853 vulnerability affects the new native Spring multipart parser (MultipartParser and DefaultPartHttpMessageReader) introduced in version 5.3.0, which does not exist in version 5.2.0.", "justification": "code_not_present" } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3c1fe5c9-c130-58f2-a833-b46c9130763a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b8b052f9-695f-5548-b337-1db0d430ac4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:19c67a6f-311e-5afc-9a70-107379cc0fae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:672e4344-16c0-50b1-87b4-40562a6edba3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e0d19eef-7889-5f42-a986-0c3e2b3eac54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:aaf8a146-373b-54d2-ae34-e015840454a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:1f1dafb3-2c41-5f43-8801-b3e414fb2f7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:84352fff-8e1d-56bc-9973-c3641dd610cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:32b9f094-387b-5441-918a-8351181b6cbf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2df9af2c-cf3f-53f6-85b4-1b7046e6addd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e3fa89f1-e6c0-5f34-acb6-69d7cdb3566a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:55a9fdf6-744b-504a-8e83-4338a50c4120", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:bfdaff39-a42e-580e-8bc8-bb9cd959a017", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.0.RELEASE-tuxcare.6" } ] }