{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b67210af-e7e1-5a3b-9a88-7bf2090dae96", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-orm", "purl": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5", "version": "5.1.5.RELEASE-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5a8eb3df-afe0-594b-8bd6-0e67a66f7759", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1a604ed3-3cf5-5175-aad6-498750eea4f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7aaed015-0a4d-5ded-b4de-97980894ba03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:693130bd-2c26-5a25-8f1e-a5c91bca0b0f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ef4cc575-3f6d-5f43-9d88-60f23101dfb2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9f2d4635-a6ab-561f-8470-aae76da62314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:dc525de7-135a-53f1-99e0-4b04769e9dcc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c0b0c295-bc9f-5977-a9bf-46329eabbc41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0ed25648-3b0c-57d2-9c19-814949c02733", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:81e72c34-02a7-58f5-ae75-6d05ae090b25", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a1a46349-d7b0-52e8-b2ef-eb1bf3460c2c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c001bf54-ebab-5f4e-b11a-fb284754cf63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1bd96073-7e77-5396-968a-b83e75ef1304", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:44360075-1790-5fb9-b820-e83a1791bbbc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:87336f1b-fe9b-598f-af72-b8f30835d8f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e49ec1ec-8995-55a3-a197-f7fc86c7200d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:035500ee-ded8-5522-8db0-8c3341912a9e", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-orm 5.1.5.RELEASE-tuxcare.5." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:525ab78a-c4c5-5b95-8f28-07807eaf40cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:fe83ddf9-fbe4-553b-9dc9-15ac882a53b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f39f323f-340b-5e88-8a6e-5ba1ed318cae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ac73b34f-2934-5620-a9ad-4b7405774b76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:fb579848-319b-5356-91a2-dd33d5cc266c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f23f9292-1c21-5239-9ff8-f6bf73c35704", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm. not_affected \u2014 Spring Framework 5.1.5.RELEASE is not affected by CVE-2025-41234. The vulnerability exists in 6.x versions where Q-encoded filename parameters fail to encode double-quotes, allowing header injection. Version 5.1.5 uses a different architecture that only outputs RFC5987-encoded filename* parameters (not Q-encoded filename parameters), and RFC5987 encoding properly percent-encodes double-quotes a...", "justification": "code_not_reachable" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:65a9d521-e122-506c-9172-1be87dd2496f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ae2c51f8-007d-55f9-abb1-0da8727c395f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c7e42899-60a2-529f-b757-91e6025d4939", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3fcbf0ee-cac7-5042-b573-faf7c4f09637", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:904610b8-9578-5e48-8d2d-6cf3cd6c1e12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3296b289-fb65-50be-9e50-36d9d7dd0c82", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7bb81b2b-1421-5658-910b-1dfc83d45a47", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:36c77faf-2c4d-54e5-abde-0b8406650b12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:356b15ae-9ee0-5762-a9fa-afc661b09d33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8985e7a8-2719-59d3-a2d3-960b8435f6d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a672bcca-12f9-554f-ae1c-2116fe65f8ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:810ea16e-7787-5179-baaf-40ceb8018298", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:db0b08c6-b214-573e-a4f3-8ea29c026cdd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7f76b546-dd6f-59d5-96e3-2e96488496d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b3e7d01a-4dd3-5c44-b786-50210ac63cf8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5a18025f-d234-5482-8fd6-e15ad84909e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3c317773-dee2-5edf-ae16-7b6e65731fc4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:95814f80-72d5-5378-a81f-6db6d3a5fff9", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm. Spring Framework 5.1.5.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and does not contain the vulnerable RouterFunctionDsl.filter API." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:80fb7e84-6e1e-505d-aa5e-4f50ed70b572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:2d09e907-5b18-59c8-b943-85669d6e1832", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:658581e5-515d-5ba5-8aff-e02384245540", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5fd5ba8a-30c5-5b05-91c5-0477b7898225", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:96a02782-3b0c-5034-bd72-35b189e24335", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e83dffdb-b56b-59d3-9819-8d2649721a23", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:074dd050-a585-5615-8687-a11437d7dde5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:946c5582-9be1-5dc9-82c5-acecc5e50573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a813c5c4-98e5-5a39-8351-8176926ae920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:419b5fd9-b167-59bd-8caa-0735ada59c17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:df116711-d12d-5f2d-9967-8afec6d28bb4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:acd648a2-c9a2-524c-a0ed-d8c456c032f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9a3f5fc9-2759-538e-838e-2ca53d1d5eaf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:87aedbde-93dc-517a-a976-205ec29e0c70", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:bafebf9c-4d32-5508-a68d-8e04d0199155", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:70336e0e-ca8d-5f2d-ae0f-e11e85466fcc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7bb7f3a1-455e-560e-986a-f55d47f84b8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:bc9d910e-6295-5b2c-8a2f-b927ebcf4992", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-orm." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.5.RELEASE-tuxcare.5" } ] }