{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ccc6049e-5d26-5ce2-a1a1-beb65335c289", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1", "version": "5.2.8.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1629b01e-4ebc-58d9-85ea-036471aa78d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5eacb9b1-d201-512d-af31-a7c9b630bb6a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:283c15eb-3859-587c-89d4-ca2c4923adae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9aa99f09-8a3b-5147-b75e-e53fa9df2091", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:84ed786f-233c-54f6-89e0-4632f3571610", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e1c1d6a6-d8a3-53e1-806e-e960fa1ed174", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cb947fea-7bbc-5c87-96df-fdbe59a23261", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b6d268e4-4e15-58fc-ab2e-76d7a036648e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2dd1d4ec-13a7-57e0-b3ce-df68be69bb02", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:494c066d-4cb2-5b93-b66f-ca387bba0e16", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f660d1fe-eeeb-5821-bba6-60f5064df1fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e0f0a224-4d3a-5d4a-ba7c-aada02d8b2f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9df4f31b-f903-5a8b-9d7f-a77d25dbe415", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:aa9ea311-dc30-52a0-9bc3-2fd0eca35aea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:899ca432-8029-5369-b8f7-a5f425b30178", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7af21c18-75b8-5e7b-83c3-7ed690857a09", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ccd511ad-7b1c-574f-940c-6d88714993be", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:64261e1f-beba-521d-97f1-d2e9dff4bc47", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c33d9801-b159-57b4-a79d-b541f8b11f69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:90cbf825-490f-550a-a2ab-0bf748e7d3ef", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core. not_affected \u2014 Spring Framework 5.2.8.RELEASE is not affected by CVE-2024-38820. The vulnerability requires locale-dependent toLowerCase() usage in DataBinder's disallowedFields matching, a code pattern introduced by the CVE-2022-22968 fix in later versions (5.2.13+, 5.3.x+). Version 5.2.8.RELEASE (July 2020) predates that fix and uses case-sensitive direct matching without any toLowerCase() calls. The vulner...", "justification": "code_not_reachable" } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ce4cd4a9-60dd-5b17-87ff-727fe2690434", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:913d46fa-ae62-575b-8452-db8ee9bbd6cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:90f6168e-8914-5a34-8d7e-bd9611388549", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core. not_affected \u2014 Version 5.2.8.RELEASE is not affected by CVE-2025-41234. The vulnerable code pattern (PRINTABLE BitSet without double-quote encoding) was introduced in version 6.0+ on Feb 1, 2023, approximately 2.5 years after 5.2.8.RELEASE was released (July 21, 2020). In 5.2.8, when using non-ASCII charsets, only the filename* parameter is output, and double-quotes are automatically percent-encoded because t...", "justification": "code_not_present" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6d9f483c-ab33-51bb-983f-6179ce2ad92d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bd774bde-f01d-5741-9531-c74298d4bea6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f750d0c3-1cea-530f-8d51-1b07e9ff6849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:310d1bb9-7d90-56d0-a4b2-68d9817c4c60", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:82bf52d8-4680-561c-84bb-1d642df0241f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6fce7115-760a-5547-9e59-c4525deb3fc3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:15e283a7-409f-582a-8fda-650a926e3e7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b76fbf4c-1097-5ec5-9312-25f4b5df9d3f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d9e299e9-4a17-5287-bc16-ab3118392c70", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:15ac3a71-c011-5381-b307-fec3fe5e381f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:416eb9e3-a117-5184-b40a-233665966c12", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0e254122-5391-5345-9d27-efa6fc730c8a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:98fcf3d1-c5bf-5dbf-a5fc-7c2c2ddb9ca2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a3c9dd8b-b840-5b92-9fc4-6ba637f632a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ca58e0ff-6fbd-5d5f-896a-8bee5c68bc3a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f86661c4-5cce-58f8-9b81-6aaea0c35d1b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:24a45388-50cc-564a-8b1a-54e07370c078", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dc129b9e-4768-5f17-be50-cd847758e770", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e9ed9ac5-4213-5b41-b749-d4385a6931cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9344cca2-74e0-56ea-aeab-d963328976de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3d4415e5-a48f-5f6c-9879-56399eac10c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:642bc063-177a-541d-a7fa-29cab1937251", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9154b8bf-72ce-5194-adb4-b07f6d03c263", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:96a30a1a-db4b-558f-a322-34e9510a2362", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:794a0692-5868-5211-9a97-8405c108f44a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cb4b5819-b18c-504b-9b6b-8b410a3406dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a3d0de67-61d5-569d-93b8-059f0b129ee1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8fe0fc02-a9b8-543d-aa77-c442f57839f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a1845b15-aae8-58e3-92e4-f0e86b858f50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:56f1a013-0d35-5714-8015-b2ed85dd9483", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7be890ea-cd2f-53f0-bbdb-76a5da383c09", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7110e39a-2634-5d76-b489-12f8d39f9d94", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1ac086e7-3458-516b-9e51-ccc5d812fb69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5c51fdc3-feb0-5a81-a6b4-9ea3e014f9e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a8ce444b-6498-5ee4-b475-470150493f17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0b64c073-f182-5801-bd61-3f8b469a7c82", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1702db09-d8a1-5406-a177-fd5b333069c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:589e42dd-5122-54cc-aa69-0dc1c3c734ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.8.RELEASE-tuxcare.1" } ] }