{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7af853c1-77ac-5b76-b503-45011a1e51e1", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jdbc", "purl": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6", "version": "5.1.20.RELEASE-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:0666fd40-02b6-54f1-8922-3cbea33d9f78", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b232086c-8ddc-5353-8e98-f9eb15c569a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e7d983c1-660e-546f-aaf8-dd8526b3e84b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:db1b79c1-50b9-58e1-919b-0a3ef425729e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ea13b11c-8169-5e45-8b30-5ac08b37ab9a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:cd1acb30-a1d0-5d77-a9a4-f6e018f552a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:f5998e7e-0628-57fd-b01c-59503802b0c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:97ebbd09-6bb8-5289-b91d-74945e075e62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:03405285-3a06-595c-8196-bd34aa0921c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:004fa1e8-0e5c-51d2-8aa0-68ab7696f19e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:79dc70a4-294e-5400-b0a0-587efe73c96f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:60b67b7e-d369-555c-b6e8-c71f1b8c8f92", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:9001144f-b5ae-5a09-9075-d684c34c8e76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:4138ffbb-53c9-56db-ba3a-e83eb95036b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:338c6cd1-a923-5080-adc3-866c9f9113fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:39c05018-aea2-57fc-abff-a412553e1e8c", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-jdbc 5.1.20.RELEASE-tuxcare.6." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:76ffcd86-37e8-5d32-af73-57f8bbe04b58", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ab9247dd-241f-50a8-8673-cd27e73f3ff3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:f027d40c-1a90-5e6a-87ea-9343adc4db71", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:bcc2e5a8-4625-585d-88a8-d9d627565233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:7d4a9df7-7de9-5d4d-9f47-4b4154ac1548", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:da26c52d-f7de-5709-9f5e-22e07d9d0721", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:10de0159-126e-5528-b9d2-30f42d7ca9fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2eb99241-5be2-5e19-9ae7-ced8c85abd29", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:f7e3be1c-45c6-5474-afac-cb1026bcfb63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e2808c6e-654a-57c1-b0ae-cfdc37d185ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3f15d20f-8656-50a6-93f5-42f8e10c62d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c2573f68-c7c4-5445-bc91-e3ba28b534e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e5434f4d-2b53-5b5a-879c-c64d0a9c784a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:fa1505a7-b3be-5e9f-9af1-362be582d177", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6eedcc02-9377-5364-b0bc-ee43a50626a8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library).", "justification": "code_not_present" } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:71a5e4f9-1c1d-505c-8b97-6880c8a8f650", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:d938b2a7-45e0-5a13-86bd-a01fbafdf36a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:87e3556b-e204-510b-b8d0-15e3976dc881", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:36fbba62-41cd-52ee-ac6f-d6d4d1f628db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:932a6bb3-9571-50a7-bfd4-596e90906a4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b4ff5fc1-592f-54d8-bccf-2182b596825d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:9f18a01e-f5e5-5a91-b9ea-e128dea6672d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a6cc365f-702b-587c-8bea-9ceb7c000531", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:846c9a52-4844-533b-912f-d2904dd4961a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a1321137-d399-5d93-aa6d-34091a430112", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c1b84a08-3727-509c-8849-1b8dff9a2bbb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:08968a87-e2c1-5335-b553-24914a9fd9e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:7d4f9f82-de52-57a7-bf4d-e5370a61cd91", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code.", "justification": "code_not_present" } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:1f084d3b-e8b0-5c3e-9bc6-621847a4c238", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e3aab969-d3ba-5524-964d-01e5e8f76fc5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e61b5f4d-88e9-563a-a15c-f436a95805eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a7719b0c-ef6f-5e65-bab2-2ff5469d3fa0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:01eb2efa-adbd-563b-b73a-a92f676fc5c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a7d0eaf1-dfaa-5a8d-a555-9450d329de6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:107c1f0d-6479-556e-981d-b9e492aaacb5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:671b7a83-b5b7-5ed6-951e-682947ff07a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:1e953578-ae48-55c4-95ae-e8061f151fb7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ecca55d1-d54d-5634-a286-8ae54ee5ef02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2ee83c9c-9cc4-595b-b1a2-798338503f12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:cb44be5e-5800-5edf-8f6a-835393a89eb7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-jdbc." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.20.RELEASE-tuxcare.6" } ] }