{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8050d09b-c08a-5ef7-862f-6a2050cfe974", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1", "version": "5.3.3-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:a897a8a4-e8cc-5aa8-9cd6-234bcc7403a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:8d41e0d8-570d-5083-888b-71db40e30d1d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:5d3d3ea0-9994-59dc-a982-829989444f99", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:f619fdac-8d4e-51d5-bd8c-8eb2db79fb33", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:7743095d-adac-577c-a51e-41b8b61fa211", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:d4d8025c-35ce-5f5a-b1b4-76f20d88de40", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:5fb5b3a6-48a7-58d4-8c59-e3ddb3afc435", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:d6237a4d-0441-5ee7-b693-6dbb69be9727", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:1ed0a7c6-1ca2-54cb-9813-03247e8b4b7b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2023-20860", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:277f211c-2f7c-515c-8c4e-e2c56900e36a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20860 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:6dbe8a9d-d729-58b2-8915-0d1c25237100", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:b0c59de0-58a7-546d-8ccf-194c4ebd4c9b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:007ec739-12c5-57df-8dbd-949f7f937f6d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:c72fbb0d-933a-508b-bcbb-1197d1ddce56", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:491d2e3f-ce12-5ee3-8dd8-0e3f4f01d00b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:8c9b9390-9926-5069-a2ab-e39b06c1b1a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:d9c1dec5-8d22-55cc-8c7e-f7cd1b8df84d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:6b55dfba-162c-5dac-b3b3-b5a8888d3c74", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:5a12f114-909f-5d82-b5ac-0d6e346aac80", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:e1ca1ace-0d0c-53d4-abb8-0571d4806176", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.3.3-tuxcare.1 of org.springframework:spring-core. not_affected \u2014 Version 5.3.3 is not affected by CVE-2024-38820. The vulnerability addresses locale-dependent toLowerCase() in DataBinder's disallowedFields validation (introduced by CVE-2022-22968 fix). Version 5.3.3 predates CVE-2022-22968 and uses case-sensitive field matching without any toLowerCase() operations in DataBinder. The vulnerable code pattern (locale-dependent case conversion in security-critic...", "justification": "code_not_present" } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:423e788f-989c-5e98-b841-fcddec2ad31c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:458ad2bb-31d9-52e5-bdf7-f98a8a04e2b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:2aeb76be-07c7-5315-805c-325500ce2b22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:66e933fc-8f58-5213-a790-762d7ea4d608", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:d9e9e6fd-2ebf-5c55-99f1-4122fdf610b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:41dd76f3-a4a4-501a-af5f-a733b4213115", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:7b66e03f-b7aa-5f8b-aed3-059fcc7a6e6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:9594d53c-ac99-58f8-900e-3f713bdc069a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:94bfda5d-57b4-55c8-8bab-16b7cd1b06ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:a5efe485-16a5-5a69-94fe-e3c09610ed1f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:54173ca4-89f3-5140-a0c0-5925ac7f1828", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:b8de1b00-6947-50b7-8393-4a5d3c94d1c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:687a1f6e-ae92-5e69-b096-37d57fe01fcf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:a88d2de2-dfd2-5c2c-b1e2-fe84214c4921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:db256fb4-37e2-56c6-8103-c4cb4ddf7734", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:9a899a08-42bb-57cf-90e1-0a0a1ea6a389", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:2ab37b10-d6d7-5b03-8d97-69c82dbc83b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:1e6b839b-faa5-5b96-ba03-d2729006a201", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:76671c6a-1b85-5067-a605-c91ef251d277", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:ba304afc-5458-5662-a055-21a9c6674e26", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:6edf71b3-736c-5c9f-9fa6-49eead0cbbab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:f9198222-448f-5fbe-ba52-050781e600ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:9f66c1ab-2ee7-5b96-af59-75d53ecee4b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:d0d84739-106e-519b-a5cb-4bfa0e5371b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:b258c5bb-b1eb-59be-a39b-926592e05473", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:6c4e3259-53f6-5331-8ba9-0691eb32759f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:eee3f0a2-1a44-5fa3-9ee8-3d6aca553273", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:e5de317e-e2ab-5599-aff3-fe97f4d1ea11", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:de9a325f-131f-5b8f-a449-c46ac9257f4f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:dbafbf97-f9ca-5f27-9359-76eb3fdfb7f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:1906c6fc-a05a-593e-afa4-1b270932f430", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:96417159-bd5b-53ec-9355-c17e30ddd803", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:39f64c2f-13fb-5364-841f-7c8b441bed1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:5d2f2dcd-624e-58b0-ba18-0bc2c0f2d5d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:6b4eb05a-02b7-5d4d-8a45-cd8454e60e17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:6cda879f-7c38-535a-b1d3-3fd4a54a4967", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:a952b57b-9192-5db1-8524-e916fda1d708", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:ed3acc55-2b7a-57dd-ae37-411d32b1f89a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:d8cd1b96-39fb-5ccb-a893-e669c79d7029", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:e075a0ba-0777-5d98-abf3-ff83e19f688c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ], "bom-ref": "urn:uuid:d83c3ce0-e7ba-5dec-8941-5db5e7c8f30b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.3-tuxcare.1 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.3-tuxcare.1" } ] }