{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c4598087-4bf1-55ab-b3ad-2f1d8b7d78e6", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2", "version": "5.2.7.RELEASE-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1d991640-40f0-5f23-8d8c-3f56a4d1e389", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:9cd34f07-e001-512e-92ab-639dff7e69c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:42cbe564-d5e0-5d69-8fcd-ce0bbc5389ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8258d368-4ee7-5521-aebb-eace9c08bc49", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f9f1e1fd-fcd1-5d7b-8c8d-303eda922754", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:70ebf368-688d-54dc-aead-a3eb588032bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:64fcbbc5-65d1-5cdb-bdd4-0d546454a748", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:86f5b574-523b-588a-ab34-16c5c5bd2f73", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:69cfc675-19c6-5f48-a99e-60f06853076d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4f9950c0-8e41-52a0-aaf2-2222b5028406", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4ed5baf8-0f1b-56f6-ac4a-8055894a4a04", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5f3c7c38-4ae0-5f74-a830-19ff49760105", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:24996a6c-b3c8-5201-b6f8-62bc7c92746d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c6f6ecbc-a6b9-53fb-85dd-e0d98cdbe4f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4bdddab9-6aee-5130-9742-f3eac6a9f570", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:490439a2-8a45-5553-8e52-3cffbbed8e8f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d13754f0-e971-59fb-bca8-e73ef603c611", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6f3107da-a284-5173-8cc0-7f774e6fc2b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:80036689-d311-5fa6-91fa-7c435141f882", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5eaa68b1-6d08-5d23-9ead-f90b67bc9e0c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core. not_affected \u2014 Spring Framework 5.2.7.RELEASE is not affected by CVE-2024-38820. This CVE addresses a locale-dependent toLowerCase() issue introduced by the CVE-2022-22968 fix. The target version predates the CVE-2022-22968 fix and does not contain the vulnerable code pattern (toLowerCase() without Locale.ROOT in disallowedFields matching). The target uses case-sensitive field matching without any toLowerCase...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:728c6772-ec58-51d1-a8d4-74b0cbbbd124", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:0130f8f9-bab1-5c34-9ce2-5a30bf246cb8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:96d5dace-0976-590b-86fd-7e24f8141085", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:9138c933-4c88-524e-88fd-5734819f13eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:23e99742-46ca-5bea-82b5-8e4a6a1e51c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ede1398f-8090-5f7e-85e3-43ca65bc518f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:203490c0-420d-531c-ac25-ba2b9fdccb26", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7c06ac7d-cf97-5c2d-a404-202ab2ccdd6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:13ca877c-f15b-5ec9-8641-b6564a00be86", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4ff20e40-73aa-5416-89d9-e59c3c1cd4b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d5ea4e3e-0670-503b-8d80-b9381fb3fc6b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ee49fad7-2b5e-5e6c-90f9-387ccb08bb89", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4844cc63-138b-595e-bda3-130c89a2dc40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d3354c0b-e179-525a-b771-b4dd4cce628d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d5d4836b-ef20-5b90-82ad-7c1170e8b815", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:47fbd5bf-e2b4-5e65-9eab-fe2225c49f48", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:25bedd47-1f9c-51ca-9675-224bfe5de887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a9792cc4-6be6-5b77-8588-0c64b90a8db4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:20abb695-4821-57ef-98b8-71fcbfb6d6c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5b471f68-269e-586a-b9df-28f53662b66f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:150da1b9-2dc6-566d-b987-d60e45d0c224", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b3bf3ad8-5581-583f-865d-e7ebc728a653", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:18d36adb-8e55-5214-86c5-56573b15d358", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b6769d9f-8b6a-57f5-8f60-32dc371836ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:324ec50a-71eb-55ba-8721-05b43f431a42", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c0119baf-37ed-5140-8408-e24cf66ae402", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:100de1b4-95c0-5add-ba51-e54a281d2294", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fd51848f-e021-54dc-9a39-e17044a0a084", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5eae8b96-03e0-5645-bf48-5ae864a6939f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:74470d27-f72f-537f-b271-d7fde6709931", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c86ef6df-b622-5859-adc4-cbaf00bcdb37", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:03888ab3-5e21-5025-9d51-1f9512235b99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:3ff4b0a6-181f-597e-8dc1-8bfaa50718f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ce6cdf70-7fde-5f69-86f9-084704ee8da8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f8dfa853-68ef-57db-9a51-4c82849a1603", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1addfb5f-8f5e-588d-a3f3-d4a7abeb8d3b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:cb396c7c-623a-5e7c-b09a-15c8ee69ac93", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2e7032c5-eb42-5864-993c-118ec471da4d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:80614f79-ee52-5804-9984-f7d063e6ed48", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.7.RELEASE-tuxcare.2 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.7.RELEASE-tuxcare.2" } ] }