{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:357830dd-dcd8-52bf-aadb-be646d70ca11", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-instrument", "purl": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6", "version": "5.1.20.RELEASE-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a4eeaa9c-994d-5963-8417-de20b0c4b0b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e254d775-68f7-5b42-9720-02964066882f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a834c32c-8608-5d09-9c8c-0f8becb612bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a004efaa-4b49-5ad0-b29d-bc7dfbdb4635", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:bf4e0556-e5b2-57d3-9b57-c5ee92f1b896", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6f4bdd77-fd28-57da-8d1f-da0f06f4e649", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:d34b55e0-196a-525f-823c-a946befa3f72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c89af8ac-aae8-5605-934b-3fcaa6b8170b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:cdada96d-d6d2-597b-9bde-46ac898367c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:f76a6703-2074-5509-b806-8c03d328aa9b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:1ace2338-9f76-537c-a093-98036315fe43", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:098c381b-1a15-51fc-8e22-c333d7ebd315", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:77463203-3ec2-5ebc-bc67-6110a72cb887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a09a672f-e8b3-5e31-baf0-e6a783607aaf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:95ed7cf1-d6e5-5d71-8f8e-0285084d5758", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:5812d3b6-8589-5a5c-bc0a-26d85d04d913", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-instrument 5.1.20.RELEASE-tuxcare.6." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:58980813-51c3-5fcf-9a65-0637a8384a91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:773f6d9b-035a-5031-bc60-fc894aa52b6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:14bc489e-5ee1-5f82-91c1-9a0c1cc527c3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:fbb480e6-fdea-5155-b55b-ca781e1f2ef9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:7dc6de37-f37f-5a6d-83f3-765ceef7e483", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:57f28318-20fd-5339-8e30-2e20d43b0343", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:7bf8ffb1-3452-5b00-83e3-930567c2a129", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e5be2364-b34d-55d9-b834-da8f24034b7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:f4a5f7b9-9fcd-547c-a9e2-e7aacd1f5932", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a26214d5-4fd5-5f4b-816c-6d7a35d5e24b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:fee8d23a-89c1-5ecd-985f-a57014d84eae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:dd5bd400-410f-5eb6-a15c-85277d4c94dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:7af233db-e61f-510e-ae10-5cfddd7bce31", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e41f5a4d-1de1-5287-9d46-12080abd06ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b36a5e49-52b9-53dd-9df3-42da6c25c53b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library).", "justification": "code_not_present" } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3798d849-b1d5-52a4-aba9-673c17da4db8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3b799887-d3ff-50e3-8ea5-68a9abb0a905", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:40bec998-3719-5718-aa67-0705bc970242", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:464ba7f1-7d74-51d7-9e49-5804accd9fb5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:1344a748-064b-5cd4-8050-8b51af666899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a1def701-c7e4-595d-bdf7-f4a5643ea82e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:514ef424-2914-56ec-8d66-833aaacb59f4", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:689610ce-fc58-5bcf-9eca-31f000212045", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:edfe89a0-82f4-518d-be11-7f85723a1750", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:256f37c9-057b-51dd-ac1b-be6cb010887b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a8fb2212-4872-5cb8-8f4d-dfc294ea4a22", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:5c18a921-59e2-5e33-b685-a7ff1ba12712", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:0579200c-d1e5-5e9e-a69e-3d681a3f778b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code.", "justification": "code_not_present" } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:cab9d628-28b0-5265-ba96-71530a134eed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:0ec1f5fc-7b76-572a-b6ef-49ee5e97815b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:f9c2c207-5a96-5293-bf6f-0480ee4b7bd6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:cfcb8806-df60-540e-9067-6bc0426f467c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3feba2d1-1ddb-50a6-b0a3-2fdaac4de518", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:bc0d7ebf-92b0-5803-8134-def9b4703fdc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:bb0c0545-f58d-5222-9ad3-d34b27638738", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:d3ef86b0-f754-5078-8385-a81e091b7f4c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6a605609-19e2-555d-8d7e-b657e4bbd7fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2ea2b407-c55f-5487-898f-b7ead252adb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:0c17e7bb-ca0b-519e-a62e-dbeefaf0c2c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3bb487f1-d040-5e94-9a5f-725db369c243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-instrument." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.6" } ] }