{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1cc620cd-2c67-5f71-8a01-b5e8298a9eaa", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-framework-bom", "purl": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5", "version": "5.1.5.RELEASE-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:275bba78-9f1a-512b-8373-ebf7fba9e650", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:fb53e14b-61b0-5e1c-995c-50cf3ef9e7af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:608d40e3-0dbb-5788-9284-ac74c849be53", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5c666b55-c99e-5285-b7a2-9a019ccc0ef2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:16b9c5cd-ad64-5064-9b55-85080ddeeae1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a78809a1-c621-554e-b485-0b6eb83bca2e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6f8ec51d-a079-55f8-bcf7-147cc90d0b34", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7fbc0833-71ef-59bc-9386-48ee66af673d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:73e377f1-7dda-507f-969f-c3d9373cd3c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d4cd0b26-200d-503f-96f0-58543e06a255", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9edb698f-0042-5676-aeb9-ccc036cc8080", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d25f4083-355d-5866-a274-28da37fe333f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f62cc063-2df7-5a57-a440-2ec20e8c1140", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6fcb8e15-15a6-515f-b305-67d1d1e0e288", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:89bb1441-12a0-5412-89fe-638f15234de5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:55157f64-bd40-5512-8848-8332f0225d1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3ff93a94-7fbe-55c5-a026-3e4cd515505f", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-framework-bom 5.1.5.RELEASE-tuxcare.5." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6c806138-1176-5ec4-ad81-c43540ba126c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c98a5c23-6c51-5fbc-995d-67239d85ceae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:eb3eceb1-7ef4-5ec1-bb1a-1d09c4e897c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:02ea6efb-36a8-5252-95ce-fb3580cc0daf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:064e5e25-31da-5af3-b93f-dcd284cb114d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:27ea9341-5cbe-53da-9747-862e0d6dc29a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom. not_affected \u2014 Spring Framework 5.1.5.RELEASE is not affected by CVE-2025-41234. The vulnerability exists in 6.x versions where Q-encoded filename parameters fail to encode double-quotes, allowing header injection. Version 5.1.5 uses a different architecture that only outputs RFC5987-encoded filename* parameters (not Q-encoded filename parameters), and RFC5987 encoding properly percent-encodes double-quotes a...", "justification": "code_not_reachable" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:21e67431-31f1-5fff-aded-40a643e8d7dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1c4c91ef-abe3-5455-a26a-3b08b393b25e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:78aae4a6-92d7-5d18-9087-b2a2f6344f31", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6f288aca-e1ee-537e-9332-2a7bd0585ef2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:94de535a-0709-5bc2-b2da-ec60efeac6b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4adb6c97-1cc5-5fce-9a9c-a449d4d0f1f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1f7e25f1-e89a-5142-b2bd-00ad28128b2c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3297122d-767a-56e0-b5ed-e37c40bf3ee9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:909c4f02-4591-512e-9afe-096481fff4e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:34763ee1-4918-58c1-adc5-40a5c694cd3c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:dffd90db-7f80-5538-af4f-87cffa597a18", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f8e7e522-a1ae-5d54-b7fb-0f908adaa3a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:dc922907-5d4a-5da7-a34b-cab084076e26", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7572acb4-b0c8-5955-b396-faf521af5cc2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5e98a561-c85e-56d9-ac17-a50c9670f426", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:27643d55-8f82-519f-828c-6897917daddb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3628d2be-988d-5318-a5f2-06eeba8d843a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c9343eba-4131-558e-bb99-5fe699c05034", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom. Spring Framework 5.1.5.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and does not contain the vulnerable RouterFunctionDsl.filter API." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:351c6f54-ae5a-5bde-bfdc-ef31d4171f9d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a19a32f9-92ba-53c8-8983-96e00a990e88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c0677e0b-db78-5ae1-8cc0-46dd299c5643", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:aa4ebb8b-3091-5979-92a5-e041835330cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:442989bc-522c-52ff-9fa6-ddf44eda0cc4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4e513c8c-0f2c-5e38-92c7-bbfa8ba18c3c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:82099b20-cd57-50f0-8fac-77b2ecf60632", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:91373915-9b80-5bba-ab47-afa8cd09e64c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:abba314b-084e-535e-afd8-a6adba35272d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a57d1b34-a616-54e3-b259-fe4d22b779a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:81953d32-edb1-52bd-bade-ab201597886c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:55250a90-63c2-5a51-98a6-7106a5b52a51", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:535077dc-3832-5097-8492-2166175b536d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:aa54fec7-fcea-5d49-991e-4220656633a8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e47f01fb-a6ad-5021-9a0c-3b18a1198e53", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:fdd8b1cf-ea7f-5f0f-b4aa-90916964f4f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:fda74e38-6b69-5437-bf25-761c691d3350", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4eed4fdd-2e39-5255-aa8b-38f7ed046e1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-framework-bom." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.5.RELEASE-tuxcare.5" } ] }