{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f144911b-4d4f-51d3-9a56-d1ea1a2cbfbe", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1", "version": "5.2.10.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0f21b08e-5b1d-5c43-b8fc-cf68c4a665c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8076fd59-de8c-535d-b19c-411a5bb8a4dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:140c13b5-b371-5c5d-932a-0771877fb9eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1bf2b272-c5f4-5af4-919a-f3d17ae324ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fe4bf502-a95e-5a60-a57e-6c8dbd7f2e30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:391daef3-8fe3-58e8-84ac-736b6a67837d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ec3ada55-f4a5-5d69-8b8b-dfb4929d17b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cb0b18ef-515d-5b63-92dd-5d3631924824", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:02d976d5-2197-557c-9689-376d0e491a88", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:62ec9b32-4678-59f4-a94c-13219ad5b322", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:251790b1-da3c-5f76-a0c9-9900329611ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cb4cf32f-56a4-5617-b72b-9f1cb0d4b9fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5aad79ea-f6b2-5c15-806d-0a1c017f3451", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8c94b8be-1da5-531f-a3a4-bfb99d31c7bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2a09d20c-e11c-5865-92e7-30f072be40ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9b2c629b-0126-5ad6-9a3c-82163e7a616f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bdc236a1-168e-5686-afc7-4b60623e3a47", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:654eb3cf-7547-57cc-8bee-73581055c970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:214baa72-7829-5fad-a4db-3334e69647cb", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core. not_affected \u2014 Version 5.2.10.RELEASE does not contain the vulnerable code pattern described in CVE-2024-38820. This CVE specifically affects the fix for CVE-2022-22968, which introduced case-insensitive field matching using String.toLowerCase() without a Locale parameter. The target version uses case-sensitive matching and does not call toLowerCase() in its DataBinder field validation logic. Therefore, the l...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8ec7f184-efe0-55a8-99a2-c94cb5cfc4a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ace2751c-a5db-5461-b4c0-9f66f08a66e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d5615a2c-bd7a-52b2-9753-57c2c6377031", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3e5e7c9d-2d74-5c11-818d-5506fe9988f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ca09f717-2e96-5ba1-b89b-01daf9a9ed4a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a2ab7771-b3f9-55f0-803c-ba89f612157f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:832d9987-2c9c-54da-8751-c45480ee673d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6e9f077d-9f2a-5b48-8e06-b28fa5fd28dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e4c0eaff-24ab-551b-b265-b3284abfe15e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0797976d-85e6-5dc3-b6f3-dd594f19bc8a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:024cd34b-3c01-5015-bbf6-3463bd50e387", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6a20cf27-a8d8-5dbc-b75e-fcab96825516", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core. not_affected \u2014 Version 5.2.10.RELEASE is not affected by CVE-2026-41840. The vulnerability targets the PartGenerator/MultipartParser multipart parsing implementation introduced in Spring Framework 5.3.0. Version 5.2.10 (released October 2020, before 5.3.0) uses a completely different Synchronoss-based multipart parsing architecture that does not have the vulnerable BodyToken buffering mechanism. The vulnerabl...", "justification": "code_not_present" } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:127fd892-9a22-5373-80e0-ae7f87a8a5cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e0ffe734-f9d6-5e76-b709-c6fac1a1f423", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:07888460-1e36-5c3d-8465-f2918f348878", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3715c954-4e6a-5760-b9dc-842aec829982", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:563bc725-d8e4-5a65-b81a-7de475785f31", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f65379c0-379d-5d46-ab96-2d1aea148cd0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9743aca7-ec7d-5901-8793-24cf4d106228", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:df1b9d7e-bb5a-5823-90e4-669342ed7932", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:522ebca5-5c53-53f5-bf0f-5bb4cca4fa10", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ad19c80a-dad7-5281-995c-92cd6eecf14b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1dc6c2c6-769e-5f1d-9cf5-68bdf67dff22", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:81a1e96d-fa68-5614-a098-5a46e89fd00f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:786a38e9-84c9-58c8-954f-ce481bf6f8b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a97091cc-ce0e-5d3a-be0c-33e2a28fe448", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c3fb2d51-b011-55c8-a5e7-528e9f3e83b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:954c702b-098d-5d37-91a8-ac604b5242ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0b7ae03c-33d3-5b14-89fa-9662fa40d5ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6805caf2-e49c-5974-94d6-ed1781e67321", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8dcc56d5-437d-58c1-8499-3dd42a5d7af2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b6fdf022-b944-5ac2-ac62-593825223dfa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:29cb25f6-7321-5ce2-98a0-d5575c2539bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3638e420-3fc6-5362-96e2-1e088a1dc1e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1129b87b-de1e-5ab0-a57b-8bffcb75ac85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fc00bb0b-5b46-59f3-a6d5-741b9b4b3f61", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:17b90866-49d9-5f35-9e41-65a08aa4b16c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7b801841-f426-5f88-ac12-55dca76f163e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:48e03236-3f67-566e-8a0d-b7fd17fb6781", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.10.RELEASE-tuxcare.1" } ] }