{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f4d470fd-d495-595d-a502-5dba09d11be0", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1", "version": "5.2.11.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1eaf23a1-7d2d-561e-a45a-65cba2217b6e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5037cfe7-3e6b-5676-a2a3-cd17f2e8d0c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dab32b81-c0db-555c-a23e-79891c1d159a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5cc79656-fc46-5b44-819a-6603b46b6b8f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f7974fb4-88c3-53fb-83e8-3973cec220cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:139523cb-d252-5984-8819-86437ab6349e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8ed65d78-25de-522a-ab85-b28170588781", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:02d91652-2926-58a1-9e0d-ae688cc062aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b109b2b0-9ef2-5cd3-84eb-5510e058d789", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3e3aca6f-1ab6-571a-8e9e-16c2e11863d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f8ff6b76-fabe-54d8-b628-9e116cb70366", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:93165210-2f80-5bdc-81aa-b9831e75f72f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e68c0fc7-fe74-52cd-b522-5553a12dcde5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8351b2e1-329f-5bf8-b4ca-30585a1b0dbf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1e917d44-c403-5d90-80d2-fcb2cd16f1d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6888c828-4d4a-5cba-aafc-80e1168c8784", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d1d659e4-5b90-5898-afeb-b08c609f9ce6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core, and is fixed in 5.2.11.RELEASE-tuxcare.2." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d778c69b-5240-5ec0-8551-8e272f9f0ffe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core, and is fixed in 5.2.11.RELEASE-tuxcare.2." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:70d54659-463b-5038-9503-35eed074561d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core. not_affected \u2014 Target version 5.2.11.RELEASE does not contain the vulnerable code pattern from CVE-2024-38820. This CVE specifically concerns improper use of .toLowerCase() without Locale.ROOT in DataBinder's disallowedFields handling, which was introduced by the CVE-2022-22968 fix. The target version predates that fix and does not perform any case conversion in setDisallowedFields() or isAllowed() methods. T...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:92deca66-5630-5ca2-9510-4ce242efc362", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dddd2535-86c5-534e-a739-06a91b672e61", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:89e58a5a-369b-526c-95c6-66358c31e361", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8bac8e19-348f-5dfa-9220-11debf99bcb4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ecaa39c1-c56b-5f81-97a3-e6dec6e20371", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core, and is fixed in 5.2.11.RELEASE-tuxcare.2." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:59629bfb-d3d6-5f5a-aa39-75a847b51959", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core, and is fixed in 5.2.11.RELEASE-tuxcare.2." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7cebcbd8-a8ad-5008-9df2-a910bf021ed3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ee985738-508e-57ad-b988-7c9c0d0eb88f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f5c45605-eb1a-5c3f-a14a-975031809bf1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7a50389c-9c77-595e-ac40-8947db461e1b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ada906d8-da0d-5394-889b-ea237df0dcfa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b8089826-abb7-51b1-9168-978da4c787e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4faa69d1-0676-5aa5-b1d2-644d1a75ca7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:705d4f97-a32a-5183-b469-40ebc8e0dedd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:560ae0a5-7564-5158-82e4-9755b502cc04", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b25f2c87-8a36-58b0-8be3-10c5fc6f35cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0833f933-4e53-5687-b084-3cab46e20b3b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:17cc16cc-b783-5473-ac47-34960e512ad4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fa144878-11a3-595d-9f52-a953cd02932b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cbe95939-d29c-54dd-aa34-3feeb15f2bcd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4aab0db2-0e89-54d2-bc7b-339064a1d407", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3921391c-fffa-574e-b900-87320ae2d4e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:83ecc648-1ddf-5d75-9b75-51cc15fc61d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cf40821b-415c-51ab-9572-6a080172fbec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cd90b2c5-6574-5bbd-93af-4b029ad0aedf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e5fa5ad0-e9ae-5592-862b-be2af626661a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4f232057-5e83-50d8-9fbd-0de36bb53dd9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:88effd38-7a86-501a-bc62-4c237b96ba2e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core, and is fixed in 5.2.11.RELEASE-tuxcare.2." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:468aa6ce-b82f-587a-ba2c-60a3b2044b4a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core, and is fixed in 5.2.11.RELEASE-tuxcare.2." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:58470ed2-992b-59ed-8d71-bbd1212c3077", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core, and is fixed in 5.2.11.RELEASE-tuxcare.2." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3fc618b0-4c46-52f8-b34e-0e55a85b8e9e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c71f9435-ac15-5039-aec4-c52ae3660978", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core, and is fixed in 5.2.11.RELEASE-tuxcare.2." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2f8cc344-8031-565d-9415-306ce250fd63", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core, and is fixed in 5.2.11.RELEASE-tuxcare.2." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b3036061-6ddb-5a3e-b1f9-629e803818f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core, and is fixed in 5.2.11.RELEASE-tuxcare.2." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:56b18b16-8bf2-5982-9324-69cce6e8471b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6b9eaf98-b59f-5067-9a7f-c7be3b3af2ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2e74d4b8-3c24-5b4c-892a-e64b0ad051e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core, and is fixed in 5.2.11.RELEASE-tuxcare.2." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cbc60f63-9f53-5d8e-9fe7-c2692f9da024", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cc6471cb-613b-557b-94e8-bb24a619fc6c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-core, and is fixed in 5.2.11.RELEASE-tuxcare.2." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.1" } ] }