{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e44f6756-1280-5cc3-a70f-53baff3c7256", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1", "version": "5.2.9.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b83eb581-846c-526c-a47f-964a6b96c2a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:92932329-75aa-55c5-a200-4ddf6a526675", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:30a3cbda-8e0b-5585-8971-a97659ef0c51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:458845f8-5b36-5af8-803d-305b3b8030a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:af51b68f-9ebc-5541-a1c8-a35463e6a1a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c5b51993-cba3-5eb7-a31f-7b8b6b9d87a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fa418f30-6fbe-5f55-b5c8-3cfb496c06b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fc88fefa-732a-56a5-b9c5-c4431069ddd2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a74dbfe3-ab6e-5b56-9a65-b2644b7f46e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5901c3d2-ec11-5213-948c-2e013c61fa64", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:90604ee0-5008-5c6a-b8b8-878160221dd0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:98aa11f9-39e4-54a0-927d-5fe08377ad22", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ccf5be72-76b3-52c9-b10a-918889f19b3c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1499665c-b6f3-5d09-a73f-677f9fa02a36", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1c77e2f5-7ceb-533a-a893-fd70c8f8a1e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8c2ecdb0-9571-5c98-b39b-acb06fe2a43c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:407406b0-fc3a-54fb-8c08-8eb36c07eaa7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:30a6b533-19af-5e52-9a8e-7695109656a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f6e31b01-15d0-5ef5-985f-0a36c4206837", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core. not_affected \u2014 Spring Framework 5.2.9.RELEASE is not affected by CVE-2024-38820 because it lacks the vulnerable code pattern. CVE-2024-38820 fixes a locale-dependent case conversion bug in DataBinder's disallowedFields validation that was introduced by CVE-2022-22968. Version 5.2.9.RELEASE never received the CVE-2022-22968 fix, so it still uses case-SENSITIVE field matching (no toLowerCase calls) in DataBinde...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f85451ac-9a3d-5af8-ac57-3140b99ee51f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9fc4c56f-bc01-5307-a79c-7c6e66d8000e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:10cf092b-d98b-57d8-bd7a-bb4c894bb361", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:92bce3a0-cc64-5b50-bc61-43f275e0508c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a978471f-4528-5c89-9b2e-fb6fe2b6250d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b4969615-9987-58bd-9834-7c2eee1adf32", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b72b561e-81dc-5e46-a802-d6c9b2001491", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6850e827-7254-58f5-86d7-56cc70dae36c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0de665bb-e534-58c0-94f3-9bf0e38d3443", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bc9f1af9-58b7-5819-8e70-887e9e37024c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:87b1deb7-768f-580d-b264-ee1a3bf8c2c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f84ff6f0-1796-515f-bded-4feab2e30f42", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:78ae65d2-66c6-5a92-ae24-7e4e36d19d45", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:73f5149f-1709-5ad8-a992-b199ea740be0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:693215c8-7fdf-5e10-b9fd-8cd0fe375381", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2c355cb6-6c93-587c-bd17-e1c12acdec65", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0cfe5c96-cb7a-572c-a892-8de8492ed9ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d1d9fdf8-9356-56b7-85dd-e88bf1c0c0a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8e9eece9-217f-50a1-aba7-4faeb58d2dc5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fe403532-2013-5df2-80db-fc0aaf8ccb26", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:38ba8faf-8ac4-5f5d-a76f-414347a382ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:323e1d15-61ef-5fef-9505-87db5ed330ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a78c4e69-a600-5cf3-a300-ab5f32c0d0e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1ce9b8f9-6b73-5412-9965-13dd4688cb60", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7e43de12-23c7-5e4b-82aa-141d5f1f8c11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ac4aa5a3-caac-59e9-9ea8-f048a838c945", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fda8f24e-618b-5511-b2e3-0949692ebb52", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:43c609d2-0bde-59d8-b0c1-a2b067de6dea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:75bb2c82-a30f-5e39-b639-bbdbfd78688c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b29094ee-1327-5b57-9185-0dcecbd4896b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:34305838-9f1e-5629-8021-ed6022692b77", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8854f2ff-677e-5e78-aeba-dae2cd889bc4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2e4e94da-7d91-5e92-adf5-f7d82b99275c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:52561233-b2d8-5c16-9b61-36098b372183", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c21181ee-5924-5a64-8ba8-9f366d28f8b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3b7edbda-457d-5a32-b6f8-bf6039374ba4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:aadd3c46-e2d1-5477-812c-7af0d959d16c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b89709c0-9063-5d1b-a9d9-cae4ec84f0eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:69d4190a-d2ca-5e9f-9e41-8ead5b8ea737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@5.2.9.RELEASE-tuxcare.1" } ] }