{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:869b22a7-547f-51e5-b27e-5b43a8a9e846", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2", "version": "5.2.11.RELEASE-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d67c87b7-b208-523b-901d-d1ae45635f9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:298b29f4-0ae2-563b-8b09-95df9c53ab7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fa8b9154-6007-5bbd-b5e0-78e7a3a9387e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:08db9462-f3fe-57c2-8f1f-9029ebba7f60", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1854dae5-f27a-51e0-82b6-9183966df449", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fd5d5c92-7ae9-5a2e-9e30-e26a254572c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5e57eb6f-c23b-5265-abed-53df2a31a289", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f8be1ab1-eb01-5ba2-bb7e-63658733d7aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7908975e-90bb-57d8-af1d-48c56e9243b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c79d9904-9c1f-540c-95f9-492ff5de1335", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2e3a3e82-a8c5-5b5d-a16c-4e501109e363", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:3cf8e74b-9cde-554f-88cb-bd5e0e5dc2fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:32e7184b-9603-5f2c-804c-466c05755e8d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:66582e62-b7ea-5a26-bc8a-87d0f7716a84", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:bbb3d8bd-f90f-5832-9e68-c5f13f49c395", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:69098cd5-2eae-5f4e-97fe-bf6bfcc16199", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d6388582-2bc0-5976-9524-69ae5124aee4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c5f720b9-1ac7-5139-9fba-1b891c7f5e38", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:57204360-77fb-5b95-a07b-1a0dcca602e6", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core. not_affected \u2014 Target version 5.2.11.RELEASE does not contain the vulnerable code pattern from CVE-2024-38820. This CVE specifically concerns improper use of .toLowerCase() without Locale.ROOT in DataBinder's disallowedFields handling, which was introduced by the CVE-2022-22968 fix. The target version predates that fix and does not perform any case conversion in setDisallowedFields() or isAllowed() methods. T...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:16009084-2081-5001-aef6-43acda900e0f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:18ca398d-d8b0-51e4-b7bb-ed085e0e0edf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4d29fee1-0aa0-53d0-97db-b66cf035057d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:57cf681e-5f41-5f0b-a55c-877c32fe4707", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d85fafc6-3393-51c3-8757-4fc167385d8c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5cd10723-7606-5080-9e53-4f670b70edcc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:46c3a269-a74c-5638-843d-b8b58c7bb973", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2dc1dce6-1df2-5b30-8625-6e71fda2d7b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e9d5bc4e-128e-5a5a-a9d7-769deb9e62e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c0beeccd-8e2d-591e-8760-572dbfe2fc9e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6107522e-fad1-53a0-94a2-53fd1bcebc36", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fc8df6c5-f1d4-5919-9b55-b73288355b3d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f89f35d9-1395-5280-95cc-e0c8d6bab494", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:acb87de7-74c6-5241-b4c3-7934babcb3e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:3cbb0e82-95ff-5cb3-acd6-d4ea53d246df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7660b54e-6cc0-5d89-83f7-e3306541e3e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:54afa65d-f6f4-51b2-a684-d86020bc06bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b7fa9d6e-6c35-5acb-b28b-034f9c6cee80", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c6dd8342-468f-5e4e-a510-4b146d963113", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:0dbcffe5-3d20-5391-9f6b-6c53b10c74f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e44cc824-0814-5336-8fe8-1c2fcc18aba5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ada3bdcd-098d-5dd1-a296-459bddcf0311", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:23baf2dd-f23e-5245-8195-c9e3736e7515", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:68200561-01cc-5713-8e51-55c0f255691b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e8bf0e23-67df-5f17-a659-0d94063360bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:93851376-e91c-50ae-9e50-a5185d060064", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:3e40f34b-1b71-5f9b-9a5e-4af63989bfc3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1acac3e7-ee78-5160-91c9-c79eee8569fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6d1747b5-0490-50a9-9218-412e1ff10970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7b4c228e-aedc-570a-9886-9f1abe9d87d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7d4f2b04-2be1-54c1-9ff7-21e12697ce99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c3c82d84-d558-5ab9-9b28-129640d7881e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2dca5b29-734a-532b-a531-09ec67a5fc9c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:cb086b57-d9b5-5562-8b1e-7e97fdc4a536", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ece87253-8789-52f9-aeef-9a67ece77bb4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c5e46d1e-3fdd-5bf1-bc2e-eaddb1dec4c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:9ae23dea-d950-5922-9636-9da7a351ad5c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2e419519-a044-55a9-9674-7f450145de21", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:cb9c3d04-7925-5cd6-912d-a18c9e413003", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.11.RELEASE-tuxcare.2" } ] }