{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9c927e60-54bd-564d-8e45-8d6fcbd93e5f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-instrument", "purl": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5", "version": "5.1.5.RELEASE-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6d2a69e8-b0bd-51c8-8dd3-e51c2829d717", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8774424d-d88a-5322-bb18-9244cef4996b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b08b7c57-0aad-51c4-aad2-b7f3a133b84f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ca757a19-bcec-5c10-9260-581482b0e1af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:19959bf3-45b7-5f4d-897a-72ec31fe0968", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b37dfaba-6cae-5d62-8381-8c83346a9b99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:cfd8f238-176b-5840-bc92-80c2bf8df179", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:958b85bb-8658-5d6e-a74f-ce543eb52b9d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c4a32c4e-3c56-5184-b24d-a17afb3de594", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d8495b23-79ed-5da1-b489-10ae809f2669", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9631e285-9779-5822-9497-b2e8295ec506", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a6609be9-cfe8-5de9-bf83-89ef6071ad81", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:842fea22-96e0-5945-92b1-0d3f31702a18", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8bbade38-a92c-5b56-9626-70e94fd4beb7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7397e38a-27ba-579a-ad87-b80ea48ec000", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4d5efee2-268b-5ba1-99ee-8c2b4ff90f0b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d0373476-d7e2-54cb-9cb8-ecc067605056", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-instrument 5.1.5.RELEASE-tuxcare.5." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:18e4569d-5520-58a5-a70f-c5d2033b6feb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:64305f5b-d6be-5c0e-a436-aa826947de1f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:078f33f3-68ff-592a-a991-b0252cf131a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:fa3b4113-b79c-5d56-abad-9b7bd1e52ac7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:25e41657-3339-5211-83b8-447db9cfbb71", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1718837b-ca7f-5e3d-a675-75c7bc4dde72", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument. not_affected \u2014 Spring Framework 5.1.5.RELEASE is not affected by CVE-2025-41234. The vulnerability exists in 6.x versions where Q-encoded filename parameters fail to encode double-quotes, allowing header injection. Version 5.1.5 uses a different architecture that only outputs RFC5987-encoded filename* parameters (not Q-encoded filename parameters), and RFC5987 encoding properly percent-encodes double-quotes a...", "justification": "code_not_reachable" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c86bb12a-e008-542a-adf6-468b7977dd89", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:cd13dde0-3283-5555-935c-3a225a308284", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:cce63d0a-d8c5-5c24-bc6a-3969236a2edc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e1ad90ec-9224-54e2-a420-90850b1f00c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:39286c83-d04e-5cc1-9aae-6763c6a58d9e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:bd9efbd2-9a90-50fd-99b4-7829c3c04a35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c6cb511b-52de-5a92-b60c-c97cb42707f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0e2b0c9b-90ad-57e1-b371-694ce58be11a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:52c270cf-ead0-5a87-bc7f-cff178a16db9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b77986ef-37cd-5be9-ae2f-0a31dde105a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f306a223-be50-51fd-b92e-cc1070cd710b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4ad0a2ab-b58b-545a-a974-f67f8f621de6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:16270a8b-e5ae-566b-8ca9-0895d32df7c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:cf075e0a-de93-5605-9077-8a45dadc89a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0711f318-0fae-563d-9403-436ce544874b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:db3ddabc-ea69-5746-a598-1bff6f8e22ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9b168d15-4279-590d-bbec-2dd14434cb94", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:bc325aa0-1754-5334-8f29-1b56ef9bcd97", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument. Spring Framework 5.1.5.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and does not contain the vulnerable RouterFunctionDsl.filter API." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:71448443-78c3-5256-84b3-0ea3155a98ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:fe4eced3-0d1d-5677-9cfa-47c98551f4d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:262b226c-515b-540a-8934-e36e8b44bec5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:808ccf17-54ea-5518-8855-c4edd5de7e47", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:06710e76-0fee-58ce-a68f-10750055a06d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f44342bf-cc89-55de-8f95-a8efbbb0a338", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7301ace2-9d24-5ebd-8c9d-7229cad4371e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7a6e0909-a2a4-5e89-9971-8ef819555275", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:2047e3bc-ca12-5f28-9e05-e97dc28a780d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e071b38b-2afe-57c9-ba61-057269fd381d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:496e21e4-1166-51df-bd35-cccf79fb0a6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:de742bca-2e72-5c03-ade4-a800d42f52b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a4497b3a-7269-5945-9a46-23e552123237", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:505cbb7f-ae87-525b-8557-3168aa7fc5b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:74486fe3-9ad6-5ad0-8cca-73f9dc139569", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:fb5c91e4-698c-5fe5-84a9-b3e73920c0f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f3732008-7f26-5db1-a191-9697b21b44b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:83f0a776-9aba-5749-a453-1c7949fbfd65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-instrument." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.5.RELEASE-tuxcare.5" } ] }